I've got about a dozen spams that have that exact header pair. I've never seen it anywhere else. It is a relatively recent thing to be seeing.
Loren -----Original Message----- From: Andy Jezierski <[EMAIL PROTECTED]> Sent: Mar 28, 2005 9:25 AM To: users@spamassassin.apache.org Subject: RE: SARE suggestion Chris Santerre <[EMAIL PROTECTED]> wrote on 03/28/2005 10:44:41 AM: > > > >-----Original Message----- > >From: jdow [mailto:[EMAIL PROTECTED] > >Sent: Friday, March 25, 2005 6:29 AM > >To: users@spamassassin.apache.org > >Subject: SARE suggestion > > > > > >It seems there are a lot of anti-spam headers which if they are seen > >on incoming email is a fairly good indication that the message is > >spam. Kaspersky Anti-Spam is one such puppy with its often appearing > >X-Spamtest-Munged-Info header. That appears in exactly one folder on > >my system with a 3 gigabyte mail corpus, the Spam directory. > > [snip] > Interesting idea. Can everyone send whatever header examples they have? I'll > gather together an run a set to test. > > --Chris Hmmm, I checked my spamtraps and out of 2800 messages I only found one message that had any spamtest headers in it. But here you go: X-SpamTest-Info: Profile: Formal (167/041185) X-SpamTest-Info: Profile: Detect Hard No RBL (4/030500) Andy