On Fri, 5 Jul 2002, Professional Software Engineering wrote:
PSE> >
PSE> >Good point, But I'm comparing the date date with the from_ date so I
PSE> >should be ok.
PSE>
PSE> Okay.
PSE>
PSE> I;m curious - if you've been running this for a few days at this
PSE> point (or reprocessing any old mailboxes with it), how effective has
PSE> it been, and what sort of false positives have you seen?
PSE>
Greping my spam box which retains 7 days of spams, I get:
X-MSMail-Priority: Normal
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Importance: Normal
X-Mundungus-Spam-Reason: Envelope to or Received scatology
X-Mundungus-Spam-Reason: subject spaces
X-Mundungus-Spam-Reason: bad date
Status: O
X-Status:
X-Keywords:
X-UID: 2157
--
Message-Id: <E17QJXm-0004H3-00(_at_)mx(_dot_)mailix(_dot_)net>
X-Mundungus-Spam-Reason: To scatology
X-Mundungus-Spam-Reason: Envelope to or Received scatology
X-Mundungus-Spam-Reason: charset
X-Mundungus-Spam-Reason: subject gagabuggee score = 864
X-Mundungus-Spam-Reason: past date
Status: O
X-Status:
X-Keywords:
X-UID: 2158
so that is two positive, with
Date: Fri, 05 Jul 0102 09:09:32 -0800
and
Date: Thu, 5 Jul 2001 12:13:50 +0900
No false positives and I spam check everything BEFORE I check for mailing
lists. But this is a personal computer so there is not a great volume of
mail. I've put in wide margins - 5 days in the future and 16 days in the
past - I'm guessing that spammers won't use very short future or past
dates and when I go on holiday, I won't download here for a couple of
weeks.
I think it is worthwhile doing. Although most spam is the Korean stuff to
my scatology@ addresses, my nominally private address and mailing list
address are receiving spam now and one with a bad date did slip through
and hit the autoresponder.
Alan
( Please do not email me AS WELL as replying to the list. Personal
email may invoke a password autoresponder. )
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail