From: "Tim Litwiller" <[EMAIL PROTECTED]>
I am getting quite a few spams that even with most of the sare rules are
sneaking in under 5 points. 4.7 - 4.9
one common thing I've noticed the last 2 days is 80% or so are addressed
to more than one email address like this
[EMAIL PROTECTED], [EMAIL PROTECTED]
the part before the @ is always the same as my email address.
is there a rule set the can check for this and add .2 to the score
... hmm looking at them again - I don't think my surbl is working they
all have geocities links in them.
I'll check on that first.
Look for our ID, tim. Look for your domain name(s). Then look for
the full thing. If ID and domain name match but full thing does not
figure it is likely to be spam and give if a couple points. Also
look for "too many of my domain addresses" in the ToCC. It is highly
unusual to get as many as you find in come careless spams.
{^_^}
