I personally am probably not interested in mail from people who don't
know how to set their system's time but you could implement it using
a threshold. To me that's a lot better than assuming an n hour
difference b/w Received and Date: etc which the sender can easily
forge. Unless the Received header it's checking is one that's
guaranteed to be outside of the senders network.
On Sep 10, 2006, at 5:11 PM, Daryl C. W. O'Shea wrote:
Robert Nicholson wrote:
If you converted all times to GMT and compared them against now
and if they were > now how often would that be FPing?
I suppose that the spam hit rate would go up a little for the
DATE_IN_FUTURE_* rules, while the ham hit rate (caused by the
thousands of people who don't know how to set their system's time)
would stay the same.
For DATE_IN_PAST_* rules the spam hit rate would probably go up a
little too, but the ham hit rate would sky rocket.
Daryl
