Date: Mon, 27 Mar 2000 21:00:18 +0200 From: Ollivier Robert <roberto@keltia.freenix.fr> To: chat@FreeBSD.ORG Subject: Re: Spam e-mail headers Message-ID: <20000327210018.A59456@keltia.freenix.fr> In-Reply-To: <20000326205854.B56803@azazel.zer0.org>; from gsutter@zer0.org on Sun, Mar 26, 2000 at 08:58:54PM -0800 References: <000801bf9735$f19e2f80$40390918@vncvr1.wa.home.com> <20000326192941.A49403@keltia.freenix.fr> <20000326205854.B56803@azazel.zer0.org>
next in thread | previous in thread | raw e-mail | index | archive | help
According to Gregory Sutter: > > > Received: from harrier.prod.itd.earthlink.net (207.217.121.12) by > > > earthlink.net (8.8.5/8.6.5) with SMTP id GAA01093 for > > > <blind@secondsight.org>; Sun, 26 Mar 2000 00:58:57 -0600 (EST) > Is there a way to determine this with certainty? What is the > signature to look for? I'd like to add it to my spam filters. With certainty no. One of the reasons the Received: line above is typical of many spamware is that IIRC this combination of sendmail / sendmail.cf is not possible (incompatibilities) and I even think 8.6.5 was never released... Some spamware even put a X-mumble: line with their signature in it (the more fool they are) making filtering easy. I can send you my regex filter for Postfix if you want. PS: no, 8.6.5 was released (see /usr/src/contrib/sendmail/RELEASE_NOTES). -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 4.0-CURRENT #78: Sun Feb 27 15:32:39 CET 2000 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000327210018.A59456>