[Razor-users] Header data does make sense?!

2007-01-29 Thread Tobias Nord
I am investigating why all mails from a certain mailing list I have joined 
are classified as spam by razor-check. Everything I have read states that 
headers do not affect classification, but if I replace the headers the 
same message actually passes! Have I misunderstood something about how the 
filter works?

-- 
Regards,
Tobias

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Razor-users mailing list
Razor-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users


Re: [Razor-users] Header data does make sense?!

2007-01-29 Thread Matt Kettler
Tobias Nord wrote:
 I am investigating why all mails from a certain mailing list I have joined 
 are classified as spam by razor-check. Everything I have read states that 
 headers do not affect classification, but if I replace the headers the 
 same message actually passes! Have I misunderstood something about how the 
 filter works?
 

Did you make both tests at the same point in time? Remember, as time passes,
razor changes.

Also, did you change any headers that might contain URLs? (ie List-Unsubscribe:)

I'm not sure, but e8 might extract URLs from headers, which would be somewhat of
an exception to the 'no headers' rule, but given that e8 is only looking at
URLs, it might make sense here.

Even if that much is true, the no headers rule still applies to e4, and e8
won't categorize normal header content, just URLs.

For what it's worth I did a test on e4. I grabbed a spam message listed by
razor, and tested the original and a modified copy.

origninal test message:
mail 1.0 e=4 sig=py7ou-MVtaytLyhN8r4uYdgtr80A: Is spam: cf 100 = min_cf 21

The modified message produced:
mail 1.0 e=4 sig=py7ou-MVtaytLyhN8r4uYdgtr80A: Is spam: cf 100 = min_cf 21


The modified message differed in every header in the message.

I Altered all of the following headers:
Received (all of them), From, To, Subject, Date, Message-ID, X-Mailer

And deleted:

MIME-Version, Content-Type,Content-Transfer-Encoding, x-priority,
X-MSMail-Priority,X-MimeOLE, Thread-Index,X-Greylist and all mailscanner
generated headers.


And still e4 generated the same signature.



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Razor-users mailing list
Razor-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users