I think someone on this mailing list mentioned that habeas doesn't use,
or endorse use of the old 'habeas' marks in email anymore, right?
Would it be safe to assume that anyone using this in the headers is a
spammer trying to get a free ride?
(going to www.habaes.com/report/ brings up a 'this page has disappeared'
page.
so, a quick header check in the MTA would keep these even from being
scanned by SA.
and a rule like this should block any (if you don't do this in your mta).
any 'legit' email still using these marks?
header _LOCAL_PHONEY_HABEAS exists:x-habeas-report
score _LOCAL_PHONEY_HABEAS 99
x-accreditor:Habeas
x-habeas-report:Please report use of this mark in spam to www.habeas.com/report/
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
