I'm using 2.50 CVS which is more closely related to 2.43 and tracks that way as well. But what part of the envelope is the return address and IP being grabbed from? The first receipt in the header? Or the one that your system is looking at the time it grabs it.
-----Original Message----- From: Matt Kettler [mailto:mkettler@;evi-inc.com] Sent: Friday, October 18, 2002 1:23 PM To: Rose, Bobby; [EMAIL PROTECTED] Subject: Re: [SAtalk] AWL issue What version of SA are we talking about? if it's 2.43, the AWL tracks both the from address AND the orginating IP. it would be highly unlikely that a spammer could forge such a thing and drive their score up. Can you provide some more detail about which SA you are running? there's major changes from 2.3.x to 2.4.0 and more in 2.4.2 and still more for 2.4.3. I wouldn't trust the AWL in 2.4.2 any further than I could throw a server room. At 10:55 AM 10/18/2002 -0400, Rose, Bobby wrote: >Should SA have a minimum message size check to counter an AWL score. I >had someone sending test messages, but because their AWL score was 23.5 >it was tagged as spam. I'm still scratching my head on how they got >such a high AWL score. > >My thought on that matter is that if a spammer was to send to their >external account using the user's email address as the return address >and that system forwards the message on, then the system here will >consider the message as SPAM under their address. Does this sound >plausible? > >-=B ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
