Re: SpamProbe 1.2 released

Anthony Campbell <ac-MeA/[email protected]>
Newsgroups gmane.mail.spam.spamprobe.general
Message-ID <[email protected]>
On 24 Jun 2005, Brian Burton wrote:
> Anthony Campbell wrote:
> >Most of mine don't contain the line either. But in the last week or so
> >I've been getting over 100 bounces from unknown recipients, presumably
> >due to a "joe job". I found that all of these bounces contained the
> >following first two header lines:
> >
> >	From [email protected]  Wed Jun 22 10:24:59 2005
> >	Return-Path: [email protected]
> >
> >No other emails have these lines. I assume they are added by my mail
> >server. I don't suppose it would be a good idea to include it in the
> >standard headers list but it might be worth documenting.
> 
> I imagine this is working so well because only the bounces contain the 
> Return-Path and SP uses header specific tokens so any token from that 
> header will be spammy.
> 
> In my mailbox all messages contain Return-Path so I'm not confident that 
> it would be as effective for me.
> 
> All the best,
> ++Brian

Nearly all my emails have the Return-Path header but its actual content
varies; only the spurious bounces have [email protected] I
presume that spamprobe now knows that this is to be classed as spam.

Anthony

-- 
ac-MeA/[email protected]    ||  http://www.acampbell.org.uk for
using Linux GNU/Debian ||  blog, book reviews, electronic  
Microsoft-free zone    ||  books and skeptical articles


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.