>>We see a hit rate here of about 29% (or "000000029%" or "00000.29") on
>>our "BADHEADERS" test
>
>what are the rules for BADHEADERS ?
It checks to make sure that the headers are RFC-compliant. For example, if
there is no Date: header (which is a required header), that would set off
the BADHEADERS test. Or, if you had a maformed header, such as
"Message-ID: I'm a spammer and think I can put anything in any header".
>What I'm talking about, specifically, is filtering on Subject: headers.
I'm not much of an advocate for keyword filtering, either. My main problem
is that if they aren't carefully constructed, false positives can be common
(such as "Subject: Hi Mom! My mortgage was approved!" getting caught
because the word "mortgage" appeared). And, as you pointed out, they can
use a lot of CPU time for minimal gain.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
