Scott, do you recommend using both BADHEADERS and SPAMHEADERS? I use both, along with the LOOSENSPAMHEADERS directive, and I'm wondering if SPAMHEADERS incorporates BADHEADERS... It seems that when I see SPAMHEADERS, I very often see BADHEADERS.
On the other hand, maybe I'm just getting used to seeing BADHEADERS in Spam Review because so many mailing lists set it off! I haven't used your web lookup tool much, but I'm getting used to seeing the date violation code in both. Andrew. -----Original Message----- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 21, 2002 4:16 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] forum for fighting fake From: fingerprint <snip> >I've found that HELOBOGUS, REVDNS, BADHEADERS and MAILFROM are all really >good indicators of spam, but that they are also indicators of a sloppy mail >admin and are thus way too common with normal mail. I've lowered their >weight, therefore, my HOLD weight is high enough to not hit on them in >combination. Note that while the HELOBOGUS and REVDNS tests are signs of a sloppy admin, the MAILFROM and BADHADHEADERS tests indicate RFC violations that aren't trivial. In the case of MAILFROM, bounce messages won't be deliverable, and in the case of BADHEADERS, the E-mail may just disappear. Those are problems that must be fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
