On 01/02, Alex wrote:
> What I haven't been able to figure out is a more generalized pattern
> from these, such as something in the header that is inconsistent with
> non-spam or contains some type of invalid header data, such as the
> mismatch between having originated at yahoo but being sent as
> sbcglobal?

Then you should provide a better variety of examples.

> Shouldn't have bayes picked this up after learning a dozen or more of these?

They're probably carefully crafted to avoid being caught by bayes.  And I
don't think SA's bayes even looks at headers.  And bayes definitely doesn't
do stuff like mismatching domains in headers.

-- 
"Begin at the beginning and go on till you come to the end; then stop."
- Lewis Carrol, Alice in Wonderland
http://www.ChaosReigns.com

Reply via email to