[sniffer] rule idea

2004-02-17 Thread Herb Guenther
At one time we had floated the idea of a rule that would mark any email that was more than 24-48 hrs ahead or behind the actual current time and date as spam. I just got two You've been invited to a blind date messages that were dated last summer. 99.9% of these off date messages are spam,

Re: [sniffer] rule idea

2004-02-17 Thread Matt
Please don't, my Grandmother probably couldn't get through then :) The more solid the basis for the rules, the higher the score I can give to the test. Most spammers nowadays will have a time that is only off by a few hours when they hard code the headers for a zombie attack, however once you