Re: SpamProbe 1.2 released

Anthony Campbell <ac-MeA/[email protected]>
Newsgroups gmane.mail.spam.spamprobe.general
Message-ID <[email protected]>
On 24 Jun 2005, Thomas Schürger wrote:
> > > What kind of bounces do you mean? What is the effect of filtering on
> > > the Return-Path header? I'm not sure in which situations this header
> > > is used in mails (is it supposed to be the envelope FROM address in
> > > certain situations?). Most of the mails in my inbox don't include that
> > > header.
> > > 
> > > Would that header be a candidate for being included in the standard
> > > set of headers scanned by spamprobe?
> > 
> > Most of mine don't contain the line either. But in the last week or so
> > I've been getting over 100 bounces from unknown recipients, presumably
> > due to a "joe job". I found that all of these bounces contained the
> > following first two header lines:
> > 
> > 	From [email protected]  Wed Jun 22 10:24:59 2005
> > 	Return-Path: [email protected]
> > 
> > No other emails have these lines. I assume they are added by my mail
> > server. I don't suppose it would be a good idea to include it in the
> > standard headers list but it might be worth documenting.
> 
> Wouldn't spamprobe take care of that already by inspecting the From
> line (or From: header) and Received: header?
> 
> By the way: Does spamprobe scan the From line (first line of a mail
> containing the envelope FROM and the reception date) or the From:
> header? Or both? The database seems to only contain one kind of from
> (terms starting with "Hfrom_").
> 
> 
> Greetings,
> Thomas.

I don't know, but spamprobe was certainly failing to catch these before
I included the header line, perhaps because the emails were all
different elsewhere. In fact, I put an entry in procmail first to direct
them  slush file, before I found the -H option in spamprobe.

(Actually, the flow of bounced emails seems to have diminished
considerably today - sod's law, I suppose.)

Anthony

-- 
ac-MeA/[email protected]    ||  http://www.acampbell.org.uk for
using Linux GNU/Debian ||  blog, book reviews, electronic  
Microsoft-free zone    ||  books and skeptical articles


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.