What is the HELOBOGUS test? I've not seen that one. You say that the spam headers would detect... why didn't it? In fact it did not fail one test.
greg -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, June 27, 2002 1:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] I was spammed by myself >I get this email that say that it was sent from myself to myself. However >I see some other interesting things in the header. What >can I use in this header to keep this from happening again? > >Received: from $domain [80.16.228.101] by mail.nfti.com > (SMTPD32-6.06) id AB048501B4; Thu, 27 Jun 2002 12:19:16 -0400 Here's the first key that it is spam: $domain. The HELOBOGUS and SPAMHEADERS tests will detect that; a custom filter could be used too with the latest beta. What else do you see in the headers that is interesting? There is a good chance that we will add a test that will look for the same To/From addresses, which is becoming more and more popular (even though it is common to see in legitimate mail, too). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
