new spam emails getting through..

[Randal, Phil]

John Wilcock [john at TRADOC.FR] wrote:
>
> I find that the mere presence of the X-Message-Info header is
> a sure spam sign. The rule below hit 499 spam and zero false
> positives over the last four weeks here.
>
> header   local_XMESSAGEINFO exists:X-Message-Info
> describe local_XMESSAGEINFO X-Message-Info header found in message
> score    local_XMESSAGEINFO 2.0
>
>
> John.

Good catch!  Of the 399 emails we've received with that header over the last
60 days, 399 are definite spam.  I'm tempted to score it higher.

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html