Is there a score for mail that comes in more than 4 days old? I had Nigerian spam come in today, that was properly flagged as such, and the date/time stamps from my server are accurate, but I would like to add additional weight for spamishness when all the other Recieved or Date headers are more than 4 days old, or more than 12 hours in the future.
SpamCop will not process mail more than 72 hours old. I have had spam rejected by them that was fresh from my mailbox, and in turn from from the internet, that was flagged by them as "too old".
If this filter does not already exist, how would I add it as a custom score? The timestamp in the Date: field and the first two Received: lines are identical, but it would have had to sit for a week at the first hop before my mail server saw the message.
Example of headers I am referring to;
Return-Path: <[EMAIL PROTECTED]>
Received: from 123vn.com ([65.39.250.5])
by sonny.com (8.12.8/8.12.8) with ESMTP id h91EwxpE028148
Wed, 1 Oct 2003 09:59:21 -0500
Received: from localhost (localhost [127.0.0.1])
(uid 501)
by 123vn.com with local; Wed, 24 Sep 2003 19:24:54 -0700
Received: from 216.139.165.12 (proxying for 216.139.165.30)
(Webmail authenticated user [EMAIL PROTECTED])
by www.123vn.com with HTTP;
Wed, 24 Sep 2003 19:24:54 -0700 (PDT)
Message-ID: <[EMAIL PROTECTED]>
Date: Wed, 24 Sep 2003 19:24:54 -0700 (PDT)
Subject: I wait your urgent reply
From: "patric janka" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
User-Agent: Webmail
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
X-Priority: 3
Importance: Normal
X-Spam-Status: Yes, hits=8.5 required=5.0
tests=HTML_10_20,HTML_MESSAGE,MIME_HTML_ONLY,NIGERIAN_BODY,
PRIORITY_NO_NAME,RAZOR2_CHECK,UNCLAIMED_MONEY,USER_AGENT
version=2.55
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
X-Spam-Report: ---- Start SpamAssassin results
8.50 points, 5 required;
* 1.6 -- BODY: People just leave money laying around
* 0.1 -- BODY: HTML included in message
* 1.4 -- BODY: Message is 10% to 20% HTML
* 2.1 -- Listed in Razor2, see http://razor.sf.net/
* 0.1 -- Message only has text/html MIME parts
* 0.5 -- Message has priority setting, but no X-Mailer
* 2.7 -- Message body has multiple indications of Nigerian spam
* 0.0 -- Has a User-Agent header
---- End of SpamAssassin results
X-Spam-Flag: YES
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
