On Fri, Jun 11, 2004 at 04:06:23PM -0500, David B Funk wrote: > Would you mind sharing with us more details about the ham that it hit? > (EG full headers with recipient names munged).
If you meant my one, I can't, it was in the logs on a customer machine. It didn't match any other spam sender or spam subject in my collection. However the sender's domain and the domain of the message id matched, as they do for all the Sober-G spam and viruses, so on reflection I think it must have been something that the customer had let through (eg whitelisting the recipient) or maybe it just got lucky on its score. Nick
