> The only thing I fear, is that as soon as SA will have such a rule
> spammers will immediatly rewrite their SW (or bether said email
> worms) and don't use anymore IP-like HELO strings.
This would be reasonable if it were in the standard SA distro, but I'm
talking about community sharing of custom rules. They could track
either case, but even standard SA has remarkable accuracy given its
visibility.
--Sandy
------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
SpamAssassin plugs into Declude!
http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
