On Fri, 31 Jan 2003 dman(_at_)nomotek(_dot_)com wrote:
FWIW, all these messages also have an X-Mailer: header. That
must be what the raw software does, though the spammers mostly
customize^w munge the contents of the header to disguise what
they're doing. I had already been looking for X-Mailer: and
been lowering my "$TRUST" calculus (part of my private heuristic)
slightly on finding it. It is not at all a dead ringer -- 42%
of my good mail from the current batch has an X-Mailer: header.
The only software included in the X-Mailer: tags that I've ever been able
to tie specifically to the spamming industry is "Flicks Softwares" (which
I haven't seen in a while) and "eGroups Message Poster." I used to check
for "The Bat!" but found it used by too many "valid" posters.
- fleet -
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail