On Wed, 2004-08-11 at 13:40, Daulton, Douglas wrote: > John, > > For those of us new to mail header issues, could you describe how this > works as a spammer's ploy.
I don't see how it possibly *could* work to reduce the score of a message. I just thought it was funny. > -----Original Message----- > From: John Hardin [mailto:[EMAIL PROTECTED] > The interesting part for SA is the contents of the X-Mailer header and > the header immediately following it. > > Are the spammers getting a bit free with their %RANDOM% tags, perhaps? > :) > > On Wed, 2004-08-11 at 12:08, Procmail Security daemon wrote: > > Headers from message: > > > > > X-Mailer: moo airlift > > > eater-carabao: agee delusive tid "X-Mailer: [random words]" is a good indicator, the problem is how do you tell (in a program) the words are random? A person can pick it up pretty easily because it doesn't look like the name of a real program. And random-word all-lowercase headers (the "eater-carabao" header above) are also a good indicator, but again, how does a program recognize words are random and don't make sense in the context? The fact that it's all lowercase might be worth a few tenths of a point towards spam independent of the actual content. -- John Hardin KA7OHZ <[EMAIL PROTECTED]> Internal Systems Administrator voice: (425) 672-1304 Apropos Retail Management Systems, Inc. fax: (425) 672-0192 ----------------------------------------------------------------------- If you smash a computer to bits with a mallet, that appears to count as encryption in the state of Nevada. - CRYPTO-GRAM 12/2001 -----------------------------------------------------------------------
