On Tue, Mar 16, 2004 at 02:43:49PM -0800, Justin Mason wrote: > They're hitting 51% of spam ;) > > Duncan, could you check these mishits:
They're all actually ham.
> 42.672 62.4448 0.4056 0.994 0.95 0.01 T_HELO_DYNAMIC_HCC:daf
I'm not really sure. They're ham. I think it has to do with the way my
ISP names it's mail servers.
I'll include the full Received headers for a ham that it hits and one
it doesn't (I suspect it might have to do with guessing trusted
hosts).
Hit:
Received: from localhost ([127.0.0.1])
by gold.daf.ddts.net with esmtp (Exim 4.22)
id 1A4l8b-0000Ek-Hy
for [EMAIL PROTECTED]; Wed, 01 Oct 2003 13:51:45 -0400
Received: from pop.bloor.is.net.cable.rogers.com [66.185.95.101]
by localhost with POP3 (fetchmail-6.2.4)
for [EMAIL PROTECTED] (single-drop); Wed, 01 Oct 2003 13:51:45 -0400
(EDT)
Received: from spf13.us4.outblaze.com ([205.158.62.67])
by fep02-mail.bloor.is.net.cable.rogers.com
(InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Wed, 1 Oct 2003 13:29:28 -0400
Received: from 205-158-62-68.outblaze.com (205-158-62-68.outblaze.com
[205.158.62.68])
by spf13.us4.outblaze.com (Postfix) with QMQP id 804251801C3A
for <[EMAIL PROTECTED]>; Wed, 1 Oct 2003 17:30:04 +0000 (GMT)
Received: (qmail 52023 invoked from network); 1 Oct 2003 17:29:52 -0000
Received: from unknown (HELO ws1-7.us4.outblaze.com) (205.158.62.57)
by 205-158-62-153.outblaze.com with SMTP; 1 Oct 2003 17:29:52 -0000
Received: (qmail 61235 invoked by uid 1001); 1 Oct 2003 17:29:48 -0000
Message-ID: <[EMAIL PROTECTED]>
No hit:
Received: from localhost ([127.0.0.1])
by gold.daf.ddts.net with esmtp (Exim 4.22)
id 19zPhx-0000Yg-Ew
for [EMAIL PROTECTED]; Tue, 16 Sep 2003 19:58:09 -0400
Received: from pop.bloor.is.net.cable.rogers.com [66.185.95.101]
by localhost with POP3 (fetchmail-6.2.4)
for [EMAIL PROTECTED] (single-drop); Tue, 16 Sep 2003 19:58:09 -0400
(EDT)
Received: from hotmail.com ([64.4.47.14])
by fep03-mail.bloor.is.net.cable.rogers.com
(InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Tue, 16 Sep 2003 19:54:34 -0400
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Tue, 16 Sep 2003 16:54:34 -0700
Received: from 130.15.202.194 by by9fd.bay9.hotmail.msn.com with HTTP;
Tue, 16 Sep 2003 23:54:26 GMT
> Same again, and Rod:
> 3.568 5.2352 0.0047 0.999 0.89 0.01 T_HELO_DYNAMIC_IPADDR2:daf
Only one hit.
Received: from localhost ([127.0.0.1])
by gold.daf.ddts.net with esmtp (Exim 4.30)
id 1AgHwH-00037u-Mw
for [EMAIL PROTECTED]; Tue, 13 Jan 2004 01:22:09 -0500
Received: from qlink.queensu.ca [130.15.126.18]
by localhost with POP3 (fetchmail-6.2.4)
for [EMAIL PROTECTED] (single-drop); Tue, 13 Jan 2004 01:22:09 -0500
(EST)
Received: from 130.15.xxx.xxx (DUxxx.Nxxx.ResNet.QueensU.CA [130.15.xxx.xxx])
by qlink.queensu.ca (8.12.10/8.12.10) with ESMTP id i0D6L7SP010951;
Tue, 13 Jan 2004 01:21:08 -0500 (EST)
X-Mailer: The Bat! (v2.00.6) Business
> and I think these may be hitting the same mails.
>
> 0.779 1.1406 0.0047 0.996 0.88 0.01 T_HELO_DYNAMIC_SPLIT_IP:daf
Same as above.
--
Duncan Findlay
signature.asc
Description: Digital signature
