Justin Mason wrote the following on 07/12/2006 13:21:
This is a great spam-sign alright, but I don't know of a way to detect what the local site's HELO is, bar each site writing their own rules to do so. Bayes does a good job of figuring this out, btw. Any suggestions?
A script that telnets into the mail system to discover helo name and the associated IP? Then it can write a system specific rule. Alan
