On 01/02, Alex wrote: > What I haven't been able to figure out is a more generalized pattern > from these, such as something in the header that is inconsistent with > non-spam or contains some type of invalid header data, such as the > mismatch between having originated at yahoo but being sent as > sbcglobal?
Then you should provide a better variety of examples. > Shouldn't have bayes picked this up after learning a dozen or more of these? They're probably carefully crafted to avoid being caught by bayes. And I don't think SA's bayes even looks at headers. And bayes definitely doesn't do stuff like mismatching domains in headers. -- "Begin at the beginning and go on till you come to the end; then stop." - Lewis Carrol, Alice in Wonderland http://www.ChaosReigns.com