On Fre, 2014-10-03 at 16:07 -0400, David F. Skoll wrote:
[...]
> That's true, but I think if we see headers from multiple vendors, it's
> pretty suspicious. Not many sites filter their mail via Barracuda
> *and* IronPort *and* KLMS *and* PerlMx *and* ... etc.
In general, X- headers are non-Rfc/local ones - but everyone knows
this;-)
IMHO the spammers just want to sneak the mail around the spam-scanners
suggesting, they had been already scanned and are clean.
So one should just ignore *all* of them (or - better - just remove them
unconditionally - personally, I don't trust some random spam-checker on
some outgoing MTA the other side and no one should IMHO).
At least, I simply delete all locally set X- headers (which I use for
filtering/sorting) on each incoming mail.
Hmm, h.rei...@thelounge.net's list of "bayes_ignore_header"s could
(should?!) actually be part of SAa default setup.
Kind regards,
Bernd
--
"I dislike type abstraction if it has no real reason. And saving
on typing is not a good reason - if your typing speed is the main
issue when you're coding, you're doing something seriously wrong."
- Linus Torvalds
