[Mimedefang] Anyone seeing sneaky spam?

David F. Skoll dfs at roaringpenguin.com
Mon Mar 24 12:04:00 EST 2003


On Mon, 24 Mar 2003, Whatley, Lee (CBA) wrote:

> What types of things are getting put in that generate the negative
> scores?

Well, I don't want to help spammers out too much. :-)

Take a look at the 50_scores.cf file for some of the larger negative
rules.  It doesn't take much imagination to go from there...

> If it is header information couldn't MIMEDefang make sure this
> is stripped out before SA gets ahold of it?

Unfortunately, there's no way to know if the information is legitimate
or put in there to fool SA.  I expect the score weights will be quite
different next time the SA team releases the results of the genetic
algorithm on a "modern" spam corpus.

For now, I'm considering zeroing out some of the negative-weight scores.

--
David.



More information about the MIMEDefang mailing list