On 17.06.09 13:48, rich...@buzzhost.co.uk wrote: > But there are certain words you would never expect to see in the > subjects of legitimate mail none the less unless you often get mail with > words like 'Orgasms' in it :-) If you do, please *share* your friends > with us all!
The often cited point on spam filtering is, that words you usually don't see in mail may the others see often. For example, while you may not need viagra, a m.d. can use if very often. The same applies to words "orgasms" and many others - people may exchange anything in their private communication and you may not to know about it. That is why solutions like spamassassin exist and that is also why SA people don't like poison pill rules. > Seriously, the RBL's would have killed this, the missing hostname, the > hint that it is a 'user' ip connecting (not a legit mail server), the > key words - all could have been used by the MTA to drop this message on > the floor without troubling SA to scan it. Looking at the content of the > mail is the last resort - if it's got that far in to your system, the > spammer wins While connecting IP and its DNS name is known before the mail is received, the subject is only seen after the data phase. After the data phase, virus and spam filters may look at the message as well as the MTA checking the subject or the body. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I just got lost in thought. It was unfamiliar territory.
