On Fri, 11 Apr 2003, Professional Software Engineering wrote:
kind of think it's somewhat out of date as the spammers have
already pretty much adapted to it. I see a lot of randomized
x-mailer use.
Which begs litterally the opposite approach: deduct from the spam score
for known regular mail client software.
The SpamAssassin developers tried that one. Now there's a raft of spam
forging the X-Mailer of desktop clients like Eudora and Netscape and Pine,
to trick SpamAssassin. Some of them even figured out that by pretending
to be several different desktop clients at once they can get a low enough
score to cause a naively installed SpamAssassin to feed their junk to the
Bayesian classifer to be learned as non-spam.
So of course soon there will be a new version of SA that applies a massive
penalty to messages that have several different X-Mailers (or whatever the
indicating marks are). And the Maypole dance goes on.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail