Re: spam on this list

[Eric Siegerman]

On Mon, Mar 04, 2002 at 10:07:56AM -0600, Steve Greenland wrote:
> On Sun, Mar 03, 2002 at 03:20:25AM +0100, Christian Andersson wrote:
> > They do use some orb-list to identify the spam, although they do not stop
> > the e-mails from these "blocked" server, they just insert some new header
> > tags, that state that the message is from a server that is blocked via orbz
> > or some other list, and let us filter the messages :-(
> 
> I've seen this claim in a couple of messages in this thread, but
> when I went back through the day's spam, I could not find any such
> spam-indicating header.

How about these?
> Message-ID: <address@hidden> 
> Date: Sun, 3 Mar 2002 09:53:54
> X-RBL-Warning: (inputs.orbz.org) Open relay input.  See 
> http://orbz.org/?211.181.167.7
> X-RBL-Warning: (relays.ordb.org) Blackholed by ORDB -- see 
> <http://ordb.org/lookup/?host=211.181.167.7>

Whether the sender's host is an open relay is far from a perfect
heuristic for identifying spam -- and whether the
open-relay-tracking projects identify it as such is less perfect
yet.  In the last 50 spam messages I've received from info-cvs,
only 22 of them have had X-RBL-Warning headers.  (And some
non-spam *has* had them, though I'm not sure how recently that
happened.)

--

|  | /\
|-_|/  >   Eric Siegerman, Toronto, Ont.        address@hidden
|  |  /
"Outlook not so good."  That magic 8-ball knows everything!
I'll ask about Exchange Server next.
        - Anonymous