On Wed, 11 Dec 2002, Dallman Ross wrote:
Then I could use a rule that said, in effect, if the
Message-ID contains raq2.paxp.com (my server) then I can
assume it is (highly probably) spam?
Why do I keep getting the feeling that you're not reading what I'm
writing?
Your writing over my head?
NO, the relay server's (or your server's) Message-ID is,
alone, not enough to positively flag mail as spam. As I wrote
before, and as Sean has since corroborated independently, much
list mail comes that way, for example. Indeed, SpamCop.net's own
emailed report notifications arrive with my upstream SMTP server's
Message-ID: in the mail.
I checked my archives and found two or three of the lists I subscribe to
do have my server in the Message-Id. I've moved the msgid.rc to a
position after the lists.rc. It's more or less now in a position to catch
"all other."
If you want to put together a recipe that bases initial suspicion
on the upstream server's being in the Message-ID, fine; and I do
that, too. But if I stopped my analysis (or my recipe) there,
I'd have lots of false positives.
I like the concept of multiple tiered recipes; but I ain't there yet.
I read this list religiously. I actually understand about 40% of what you
folks are saying. I don't participate much; mostly because it seems like
asking questions in here is like poking a hornet's nest with a short
stick. Maybe I'm just sensitive. :)
FWIW, the spam recipes I have in place are now filtering out about 95% of
the spam (including Nigerian scams and viruses) I receive.
- fleet -
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail