Spamassassin negative score? {Scanned}

Matt Kettler mkettler at EVI-INC.COM
Wed Jan 14 16:49:41 GMT 2004


At 11:24 AM 1/14/2004, Peter Nitschke wrote:
> > X-Mailer: mPOP Web-Mail 2.19
>
>So suggested rule to add to SA is:
>
>header    RM_hxm_mPOPwebMail     X-Mailer =~ /mPOP Web-Mail/
>score   RM_hxm_mPOPwebMail      5.0

I'd not go that far as to give it 5 points.. I've received at least one
legit message with this X-Mailer on the snort-users mailinglist... it seems
to be uncommon, outside of spam, but it isn't pure ratware. It seems to be
mostly used by Russian posters.


Here's a web archive of a legit post using this mailer.

  http://list-archive.xemacs.org/xemacs-users-ru/xemacs-users-ru.200112



More information about the MailScanner mailing list