Re: Rule suggestion - smtp sanity

2007-07-16 Thread Matthias Leisi
From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this -0.1 or -0.2 if this happens on the last hop? - It proves that the

Re: Rule suggestion - smtp sanity

2007-07-16 Thread Matus UHLAR - fantomas
From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this -0.1 or -0.2 if this happens on the last hop? - It proves

Re: Rule suggestion - smtp sanity

2007-07-15 Thread hamann . w
On 7/13/2007 11:04 AM, arni wrote: From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this -0.1 or -0.2

Re: Rule suggestion - smtp sanity

2007-07-14 Thread Matt Kettler
Matus UHLAR - fantomas wrote: On 13.07.07 17:04, arni wrote: From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this

Re: Rule suggestion - smtp sanity

2007-07-14 Thread Dave Koontz
Most likely, Johnny Spammer monitoring this list will just add a FAKE header to take advantage of such a rule. Matt Kettler wrote: Matus UHLAR - fantomas wrote: On 13.07.07 17:04, arni wrote: From large providers i sometimes recieve messages through encrypted smtp, the header

Re: Rule suggestion - smtp sanity

2007-07-14 Thread John D. Hardin
On Sat, 14 Jul 2007, Dave Koontz wrote: Most likely, Johnny Spammer monitoring this list will just add a FAKE header to take advantage of such a rule. You would only check it in the header that your MTA added. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL

Re: Rule suggestion - smtp sanity

2007-07-14 Thread Matt Kettler
1) that won't help any. You'd want to check this against headers generated by trusted relays. 2) Even if he does, who cares. At such a small score it's unlikely to help the spammer any. However, email which is marginally above the autolearn threshold will be helped. (Personally, I get a

Re: Rule suggestion - smtp sanity

2007-07-14 Thread Eric A. Hall
On 7/13/2007 11:04 AM, arni wrote: From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this -0.1 or -0.2 if this

Rule suggestion - smtp sanity

2007-07-13 Thread arni
From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this -0.1 or -0.2 if this happens on the last hop? - It proves that the

Re: Rule suggestion - smtp sanity

2007-07-13 Thread Matus UHLAR - fantomas
On 13.07.07 17:04, arni wrote: From large providers i sometimes recieve messages through encrypted smtp, the header looks smth like this (qmail): ... with (AES256-SHA encrypted) SMTP; ... Would it be a good idea to give a minimal negative score on this -0.1 or -0.2 if this happens on