Tomasz wrote:
> After I sent the post, I was beginning to wonder if it has anything to
> do with that CAPS-LOCK printed text saying "MYNETWORKS" :)
> I'll test it tomorrow.
> Does it add anything to the headers, when you have a "hit" (mail from
> another network)?
I got this from computerworld.com:
X-Spam-Status: No, score=-29.852 required=5 tests=[BAYES_00=-2.599,
DATE_IN_PAST_12_24=1.247, L_P0F_WXP=1.5, USER_IN_WHITELIST=-30]
X-Amavis-OS-Fingerprint: Windows XP Pro SP1, 2000 SP3, (distance 18, link:
ethernet/modem), [199.92.213.72]
And from this list:
X-Spam-Status: No, score=-2.599-9 required=5 tests=[BAYES_00=-2.599]
X-Amavis-OS-Fingerprint: Linux 2.5 (sometimes 2.4) (4) (up: 3043 hrs),
(distance 14, link: ethernet/modem), [66.35.250.225]
I set:
header L_P0F_WXP X-Amavis-OS-Fingerprint =~ /^Windows XP/
score L_P0F_WXP 1.5
header L_P0F_W X-Amavis-OS-Fingerprint =~ /^Windows(?! XP)/
score L_P0F_W 1.0
header L_P0F_UNKN X-Amavis-OS-Fingerprint =~ /^UNKNOWN/
score L_P0F_UNKN 0.001
header L_P0F_Unix X-Amavis-OS-Fingerprint =~
/^((Free|Open|Net)BSD)|Solaris|HP-UX|Tru64/
score L_P0F_Unix -0.5
Gary V
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
