From owner-freebsd-chat Mon Mar 27 12:28:24 2000 Delivered-To: freebsd-chat@freebsd.org Received: from frmug.org (frmug-gw.frmug.org [193.56.58.252]) by hub.freebsd.org (Postfix) with ESMTP id A611337BC82 for ; Mon, 27 Mar 2000 12:28:04 -0800 (PST) (envelope-from roberto@keltia.freenix.fr) Received: (from uucp@localhost) by frmug.org (8.9.3/frmug-2.5/nospam) with UUCP id WAA14552 for chat@FreeBSD.ORG; Mon, 27 Mar 2000 22:27:59 +0200 (CEST) (envelope-from roberto@keltia.freenix.fr) Received: by keltia.freenix.fr (Postfix, from userid 101) id 9F2358869; Mon, 27 Mar 2000 21:00:18 +0200 (CEST) Date: Mon, 27 Mar 2000 21:00:18 +0200 From: Ollivier Robert To: chat@FreeBSD.ORG Subject: Re: Spam e-mail headers Message-ID: <20000327210018.A59456@keltia.freenix.fr> Mail-Followup-To: chat@FreeBSD.ORG References: <000801bf9735$f19e2f80$40390918@vncvr1.wa.home.com> <20000326192941.A49403@keltia.freenix.fr> <20000326205854.B56803@azazel.zer0.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.1.9i In-Reply-To: <20000326205854.B56803@azazel.zer0.org>; from gsutter@zer0.org on Sun, Mar 26, 2000 at 08:58:54PM -0800 X-Operating-System: FreeBSD 4.0-CURRENT/ELF AMD-K6/200 & 2x PPro/200 SMP Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Gregory Sutter: > > > Received: from harrier.prod.itd.earthlink.net (207.217.121.12) by > > > earthlink.net (8.8.5/8.6.5) with SMTP id GAA01093 for > > > ; Sun, 26 Mar 2000 00:58:57 -0600 (EST) > Is there a way to determine this with certainty? What is the > signature to look for? I'd like to add it to my spam filters. With certainty no. One of the reasons the Received: line above is typical of many spamware is that IIRC this combination of sendmail / sendmail.cf is not possible (incompatibilities) and I even think 8.6.5 was never released... Some spamware even put a X-mumble: line with their signature in it (the more fool they are) making filtering easy. I can send you my regex filter for Postfix if you want. PS: no, 8.6.5 was released (see /usr/src/contrib/sendmail/RELEASE_NOTES). -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 4.0-CURRENT #78: Sun Feb 27 15:32:39 CET 2000 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message