Re: filtering UCE with Received: and From: analysis

Bart Schaefer <[email protected]>
Newsgroups gmane.mail.procmail
Message-ID <[email protected]>
On Jul 26, 2012, at 2:00 PM, Eric Smith <[email protected]> wrote:

> So my idea is that when the domains in the From/From_ do not
> match the domains in the Received, then this is a good scoring
> mechanism for spam. 

SpamAssassin has had rules for doing this for years.  You might attempt to duplicate some of its logic.  Of course it has perl data stuctures to link chains of receipt, etc., so it might be pretty difficult to do in procmail.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.