-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[EMAIL PROTECTED] writes:
> On Wed, 18 Jan 2006, Brian Grossman wrote:
> 
> > On Wed, 18 Jan 2006 10:52:48 -0800
> > [EMAIL PROTECTED] (Justin Mason) wrote:
> > 
> > > Andrew Pam writes:
> > > > Message-IDs MUST be globally unique as defined in the RFCs, so the
> > > > chance of collision is zero unless someone has very broken (or
> > > > malicious) email software.
> > > 
> > > A good 80% of email, according to recent statistics, is indeed broken
> > > and/or malicious -- spam, malware, etc. I've seen many spams with
> > > duplicate or missing Message-IDs.
> > 
> > Is anyone here blocking messages without message-ids?  How's it working
> > for you?
> 
> It's working great for me. But I haven't checked in a long time just how 
> well. Last I checked (over a year ago) it stopped about 40% of my spam.
> 
> > Get many false positives?
> 
> No complaints ;-) But then I'm not a big network - just me really.

for what it's worth, I *have* seen nonspam mail doing this; typically
  transactional mail/legit bulk newsletters.

A quick grep of my legit-bulk samples folder gives me a couple of
newsletters from Vonage, May 2004, a "welcome to blah mailing list"
message from lists.sourceforge.net, and a welcome message for a mailing
list at http://giftfile.org/ .   Try it out -- egrep for

    Message-I[dD]: <[EMAIL PROTECTED]>

e.g. in my case it's

    Message-I[dD]: <[EMAIL PROTECTED]>

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFDzs7tMJF5cimLx9ARAviWAKCrc5MxfPUGm8BcyMZy54YyfCUQHwCfTDh2
F4VMCDzuiEg6E/6hYq8hTN8=
=WOup
-----END PGP SIGNATURE-----

Reply via email to