je to spam? mirne OT

[Matus UHLAR - fantomas]

Petr Vileta <petr na practisoft.cz> wrote:
> Ja vim, melo by to patrit do sendmail, ale tam to nikdo necte.

ale cita. na druhu stranu to nie je otazka na MTA...

> Chci se zeptat, zda lze jako spam hodnotit zpravu, kde domena v
> "Message-ID..." neodpovida domene v "Received:" ani domene ve "From:"?
> Nebo jinymi slovy, muze existovat legalni mail, kde alespon neco neodpovida
> domene v "Message-ID" ?

moze. aj sa to casto stava, pri mailoch odoslanych z PC v lokalnych
domenach, kde sa uvadzaju vseliake pofiderne domeny...

> Porovnal jsem (ocima) par desitek legalnich mailu a par desitek spamu a
> vychazi mi, ze kdyz mam napriklad toto
> 
> Return-Path: <.... na seznam.cz>
> Received: <.... na seznam.cz>
> From: <.... na seznam.cz>
> Message-ID: <BCJEHJEGNMCBSSDGF na email.ru>
> 
> tak je to vzdycky spam.

spamassassin zistuje, ci je Message-Id: pridane relayou a ak ano, prida
jej nejaky rating...

podla tych cisel by som povedal ze to je len jeden z indikatorov...
(standardna hodnota pre posudenie mailu ako spam je 5)


describe MSGID_FROM_MTA_SHORT  Message-Id was added by a relay
score MSGID_FROM_MTA_SHORT 3.665 3.310 3.167 3.030

describe MSGID_FROM_MTA_LATER  Message-Id was added by a relay
score MSGID_FROM_MTA_LATER 0

describe MSGID_FROM_MTA_BACKUP Message-Id was added by a relay
score MSGID_FROM_MTA_BACKUP 0 1.774 0 0.817

describe MSGID_FROM_MTA_HEADER Message-Id was added by a relay
score MSGID_FROM_MTA_HEADER 0.915 0.762 2.044 0.705

describe MSGID_FROM_MTA_HOTMAIL        Message-Id was added by a hotmail.com relay
score MSGID_FROM_MTA_HOTMAIL 1.747 1.560 2.800 2.700


-- 
Matus UHLAR - fantomas, uhlar na fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"The box said 'Requires Windows 95 or better', so I bought a Macintosh".