On 10/14/2014 02:02 PM, Reindl Harald wrote: > > Am 14.10.2014 um 13:58 schrieb Axb: >> On 10/14/2014 01:51 PM, RW wrote: >>> On Tue, 14 Oct 2014 10:44:51 +0200 >>> Axb wrote: >>>> >>>> have you verified that some of these are not included? >>>> >>>> X-Originating-IP will not be included as it can be used to help >>>> detect ham or spam >>> >>> It's really no different to other headers you are ignoring. >> >> for example, if you get a flood of 419s from the same source, you may >> want it to be tokenized... or not? >> or if it only sends ham.... > > but are those IP's not mostly dynamic ones from botnets and so you end > in a lot of tokens over the time? >
Or it is a good machine that is rooted, and then cleaned up and restored to business by its whitehat admin. But it still is blocked by your self-inflicted 'bayes poison' :) Use rbls for ip-based reputation, not bayes. Tom
signature.asc
Description: OpenPGP digital signature
