Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Mar 2000 21:00:18 +0200
From:      Ollivier Robert <roberto@keltia.freenix.fr>
To:        chat@FreeBSD.ORG
Subject:   Re: Spam e-mail headers
Message-ID:  <20000327210018.A59456@keltia.freenix.fr>
In-Reply-To: <20000326205854.B56803@azazel.zer0.org>; from gsutter@zer0.org on Sun, Mar 26, 2000 at 08:58:54PM -0800
References:  <000801bf9735$f19e2f80$40390918@vncvr1.wa.home.com> <20000326192941.A49403@keltia.freenix.fr> <20000326205854.B56803@azazel.zer0.org>

next in thread | previous in thread | raw e-mail | index | archive | help
According to Gregory Sutter:
> > > Received: from harrier.prod.itd.earthlink.net (207.217.121.12) by
> > > earthlink.net (8.8.5/8.6.5) with SMTP id GAA01093 for
> > > <blind@secondsight.org>; Sun, 26 Mar 2000 00:58:57 -0600 (EST)

> Is there a way to determine this with certainty?  What is the
> signature to look for?  I'd like to add it to my spam filters. 

With certainty no. One of the reasons the Received: line above is typical of
many spamware is that IIRC this combination of sendmail / sendmail.cf is not
possible (incompatibilities) and I even think 8.6.5 was never released...

Some spamware even put a X-mumble: line with their signature in it (the more
fool they are) making filtering easy.

I can send you my regex filter for Postfix if you want.

PS: no, 8.6.5 was released (see /usr/src/contrib/sendmail/RELEASE_NOTES).
-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr
FreeBSD keltia.freenix.fr 4.0-CURRENT #78: Sun Feb 27 15:32:39 CET 2000



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000327210018.A59456>