On Thu, Jan 20, 2005 at 03:25:55AM +0100, Ruud H.G. van Tol wrote:
Advanced usage: calculate the difference (in seconds)
between the time-of-arrival (from the From_header) and
the time-of-creation (from the Date:header). If negative
or very large, then the Date:header is likely forged.
Yup. I've been doing that for 2.5 years now with excellent
results. I even have a time-zone calculation in there.
It took me the longest time to code it back when (all in
procmail, of course).
Messages sent in the future are even more likely to be spam
than in the past; though if it's more than six hours' diff.
after calculating in the TZ, it's almost always spam.
--
dman
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail