On 11/8/2011 2:38 AM, João Gouveia wrote:
AFAIK, that's a commercial plugin. Also, from what I remember of that plugin, it actually sends the complete pristine message to their datacenter for analysis, which might not be what you're expecting.
I can't speak to that particular plug-in, but in one Commtouch implementation I worked with in a previous $DAYJOB only hashes were sent up to the servers. Some implementations may vary though, so I would evaluate the SpamAssassin plug-in before relying on this.
It would be possible to identify IPs of mail servers that received similar messages, but not the message content itself.
-- Dave Warren, CEO Hire A Hit Consulting Services http://ca.linkedin.com/in/davejwarren
