Hi Ken, I added the list to dspam.conf. Should/Can I delete from database those pattern as well?
Thanks On Tue, Mar 29, 2011 at 9:30 PM, Kenneth Marshall <k...@rice.edu> wrote: > On Tue, Mar 29, 2011 at 09:25:22PM +0300, Ibrahim Harrani wrote: >> Hi, >> >> dspam burton and graham algoritm hits many header like the followings. >> >> >> >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.990000] DKIM-Signature*Id+Message (1frq, 258s, 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.990000] DKIM-Signature*Id+Message (1frq, 258s, 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.990000] Received*(HELO+nm16.bullet.mail.sp2.yahoo.com) (1frq, 13s, >> 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.990000] Received*(HELO+nm16.bullet.mail.sp2.yahoo.com) (1frq, 13s, >> 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.990000] Received*nm16.bullet.mail.sp2.yahoo.com)+(98.139.91.86) >> (1frq, 13s, 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.990000] Received*nm16.bullet.mail.sp2.yahoo.com)+(98.139.91.86) >> (1frq, 13s, 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.990000] DKIM-Signature*Property+content (1frq, 37s, 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.990000] DKIM-Signature*Property+content (1frq, 37s, 0i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.984718] DKIM-Signature*h=X+Yahoo (1frq, 658s, 2i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.984718] DKIM-Signature*h=X+Yahoo (1frq, 658s, 2i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.977352] DKIM-Signature*h=X (1frq, 661s, 3i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.977352] DKIM-Signature*h=X (1frq, 661s, 3i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.027720] DKIM-Signature*Newman+Id (1frq, 836s, 5743i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.027720] DKIM-Signature*Newman+Id (1frq, 836s, 5743i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.969807] Received-SPF*yahoo.com+does (1frq, 164s, 1i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.969807] Received-SPF*yahoo.com+does (1frq, 164s, 1i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.968696] Received-SPF*at+yahoo.com (1frq, 158s, 1i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.968696] Received-SPF*at+yahoo.com (1frq, 158s, 1i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [graham] >> [0.965054] Received*NNFMP+29 (3frq, 141s, 1i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.965054] Received*NNFMP+29 (3frq, 141s, 1i) >> Tue Mar 29 21:18:18 2011 15215: [03/29/2011 21:18:18] [burton] >> [0.965054] Received*NNFMP+29 (3frq, 141s, 1i) >> >> Do you suggest to ignore the following headers? >> >> IgnoreHeader X-Spam-Status >> IgnoreHeader X-Spam-Scanned >> IgnoreHeader X-Virus-Scanner-Result >> IgnoreHeader X-Virus-Scanned >> IgnoreHeader X-DKIM >> IgnoreHeader DKIM-Signature >> IgnoreHeader DomainKey-Signature >> > > Yes, definitely. > > Ken > ------------------------------------------------------------------------------ Enable your software for Intel(R) Active Management Technology to meet the growing manageability and security demands of your customers. Businesses are taking advantage of Intel(R) vPro (TM) technology - will your software be a part of the solution? Download the Intel(R) Manageability Checker today! http://p.sf.net/sfu/intel-dev2devmar _______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user
