linus larsson wrote: >>> I noticed a lot of spams have the header "Mime-Version: *.*" missing >>> Maybe it should be rated.
Theo Van Dinter wrote: >> Mime-Version isn't a required header, so I'm not surprised to find >> lots of mails without it. Bart Schaefer <[EMAIL PROTECTED]> writes: > The thing to check for is the combination of the presence of > Content-Disposition or Content-Transfer-Encoding _with_ the absence of > Mime-Version. Mime-Version _is_ a required header for MIME-formatted > messages. Hmm... it seems like a promising area and I tried some of the above ideas, but only one worthwhile version so far. OVERALL% SPAM% NONSPAM% S/O RANK SCORE NAME 12603 4910 7693 0.390 0.00 0.00 (all messages) 100.000 38.9590 61.0410 0.390 0.00 0.00 (all messages as %) 2.174 5.4786 0.0650 0.988 0.91 0.01 T_MIME_NO_VERSION_ODD 2.539 5.8045 0.4550 0.927 0.75 0.01 T_MIME_NO_VERSION_LONER 4.523 9.8167 1.1439 0.896 0.68 0.01 T_MIME_NO_VERSION_CTYPE 4.523 9.8167 1.1439 0.896 0.68 0.01 T_MIME_NO_VERSION_ANY 2.349 4.3381 1.0789 0.801 0.48 0.01 T_MIME_NO_VERSION_CTE 2.349 4.3381 1.0789 0.801 0.48 0.01 T_MIME_NO_VERSION_CD_OR_CTE 2.349 4.3381 1.0789 0.801 0.48 0.01 T_MIME_NO_VERSION_TWO 0.000 0.0000 0.0000 0.500 0.12 0.01 T_MIME_NO_VERSION_ALL 0.000 0.0000 0.0000 0.500 0.12 0.01 T_MIME_NO_VERSION_CD 0.000 0.0000 0.0000 0.500 0.12 0.01 T_MIME_NO_VERSION_CD_AND_CTE Some other combinations might be worth testing. It's now in CVS for other people to test. > A separate rule might test for Content-Type without Mime-Version but > there are some broken MUAs that do that, so it wouldn't be as good an > indicator. Perhaps combined with some of the USER_AGENT tests ... Yeech. Exempting broken MUAs is getting old. *sigh* -- Daniel Quinlan Linux, open source, and http://www.pathname.com/~quinlan/ anti-spam consulting ------------------------------------------------------- This SF.net email is sponsored by: ApacheCon, November 18-21 in Las Vegas (supported by COMDEX), the only Apache event to be fully supported by the ASF. http://www.apachecon.com _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
