RW wrote:
Razor looks-up fuzzy hashes of an email on a server that records the values that have previously been reported for spam. JMF_W is based on the IP address of the last hop into your trusted network (or internal if you set it up that way). Neither is based on URLs.
Actually, Razor does check URLs as well. It's one of the signature types. Type 8, I think.
-- Kelson Vibber SpeedGate Communications <www.speed.net>