I am interested in such a check. I think that a year is too long, though. The check should be in terms of days or even hours. A server that is a week off is more than likely not a properly configured legitimate mail server.
I posted this to the listserv a little less than a month ago, but got no replies: ================================ Another lightweight test you might want to consider is scoring a message for how much the Date: header deviates from Delivery-date: I get a lot of spam that is dated a few days/weeks in the future, and also a few years in the past. This almost never happens with legitimate email. Occasionally, there will be the legitimate automated email from a server that is misconfigured and thinks it is 12/31/1969 6:00pm, but that is rare. A difference of more than 24-48 hours is more than likely not a drifting clock or misconfigured server, but rather a spam message attempting to gain attention by either floating to the top of the email list, or forcing a user to hunt through their email to clear the "new mail" flag. http://www.hoax-slayer.com/future-date-spam.shtml ================================= Daniel L. Miller wrote: > Would anyone be interested in a date check? Something like if a message > is dated more than 365 days in the future it should be classified as spam? > > I know that most of these type of messages usually get flagged by > another test - but this would let us trash that specific group if it was > flagged as [DATE], or [FUTURE], or maybe [TIME-TRAVELER]. > > ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
