Pete,
I've been seeing a good deal of Experimental hits on bounce messages, primarily with the Nazi spam that has been forging recipients, but I've seen these on other messages that seemingly don't have any spam content, though most of course do involve spam.
I was wondering if this is due to IP's being logged for spamtrap hits from these bounces, or if it was due to something else. If these are IP related, it would likely be problematic.
And another related question regarding the Nazi spam. Would it be possible to move these rules from Experimental to another category such as Malware or General? Personally I have grown accustomed to Experimental being a category for rules that are not as reliable and more likely to hit on personal E-mail so I weight it low, on the other hand this Nazi stuff is certainly problematic and I'm hoping that your rules are tight enough to place in another category. I do have a filter that deals with bounce messages from Joe-Jobs by testing for both a Sniffer hit or other content related filter along with indications of a null sender or other sign of a bounce, but I was excluding Sniffer-Experimental from this.
Thanks,
Matt
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
