On Thu, 22 Jan 2004, Robert Menschel wrote:
>> header SYL_BAD_XOIPa X-Originating-IP !~ /\[?(\d{1,3}\.){3}\d{1,3}\]?/ [if-unset:
>> 0.0.0.0]
>> describe SYL_BAD_XOIPa Improperly formatted X-Originating-IP header
>> score SYL_BAD_XOIPa 4.0 # frankly, this alone should be grounds
>> # for rejection ...
>
> Yes, that one works for me:
>
> SYL_BAD_XOIPa -- 3881s/0h of 91714 corpus (74113s/17601h) 01/22/04
Beautiful! Thanks for checking that! Perhaps I can buy you a salted
ham sandwich some time! :-)
> With results like this, 5% of the spam in my corpus and no ham,
> this is a rule that should be added to the next distribution set
> (or at least a variation thereof).
Wow! I'd be really happy to see that ...
> Would you have any objection to submitting for consideration,
> and sending in an Apache Contributor License Agreement so the SA
> developers can use this rule?
I'll be glad to, as soon as I can figure out where to get what I need,
and what needs to be submitted how, etc. If I need to provide test
results, may I quote yours?
--
----------------------------------------------------------------------
Sylvain Robitaille [EMAIL PROTECTED]
Systems analyst / Postmaster Concordia University
Instructional & Information Technology Montreal, Quebec, Canada
----------------------------------------------------------------------
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
