Quoting Matthias Leisi <matth...@leisi.net>:
On Mon, Jun 9, 2014 at 8:43 PM, Kevin A. McGrail <kmcgr...@pccc.com> wrote:
I think the core issue is that age of domains is a good indicator of spam.
So there is merit in building a distributed look-up system using SA.
I have more ideas than resources, of course...
I repeat my question: which domain? HELO, MAIL FROM, From:, ...?
-- Matthias
HELO hasn't matched anything in my tests.
MAIL FROM has matched many, though the helo's are always a different domain
From I have only started doing yesterday, and not sure exactly how I
will track them. Likely just wait a few days, and check my ham/spam
folders and compare what rules where hit.
