[Mimedefang] Message header madness - was Re: SPF Usefulness(was Re: SNARE spam detection)

[WBrown at e1b.org]

- <kd6lvw at yahoo.com> wrote on 07/31/2009 06:39:21 PM:

> Whether the URL appears in a signature (i.e. after a line that has
> DASH-DASH-SPACE) or not should be a scoring factor.  Legitimate
> personal mail often have signatures.  Spam often doesn't.

People don't have a clue about the tear line before the signature.  I've
seen just about any thing used as a separator, from a row of all the same
characters to repeating patterns of 2 to 5 characters.

Try finding all of those to test if the URL is part of a signature.

Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agent responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachments. Please notify the sender immediately by return e-mail or telephone and delete this message from your system.