On Wed, 9 Sep 2009, Jason Haar wrote:
On 09/09/2009 04:07 AM, John Hardin wrote:
Do you have any stats on how spammy this class of mail is? Is it pure
ham that you can detect using other methods, e.g. it's sent from a
trusted source?
Actually, it's HAM - not spam.
My point. If those messages are 100% ham, and they have indicators that
are easy for the MTA to detect - e.g., from a known correspondent MTA IP
address - then put some rules in at the MTA glue layer to say "don't pass
these messages to SA at all".
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
It is criminal to teach a man not to defend himself when he is the
constant victim of brutal attacks. -- Malcolm X (1964)
-----------------------------------------------------------------------
9 days until the 222nd anniversary of the signing of the U.S. Constitution
