[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: A spam fake From: example


--On søndag, januar 12, 2003 08:39:05 -0800 ned.freed@mrochek.com wrote:


just to demonstrate....
there are spammers that fake a legitimate From: address. Even though
using the same address as sender and recipient is an "interesting"
special case....

Harald, this is not the issue....



At issue is whether or not spammers are attempting to get the stuff they
mail out through list subscription filters and onto lists by using
addresses known to be subscribers to those lists.




apologies. I misremembered your earlier message to say that spammers didn't 
send from legitimate addresses, and forgot the part about "in order to get 
around poster-only mailing list filters".



I agree with you about the best being the enemy of the good; I think we 
also agree that any heuristic method for protecting IETF WG mailing lists 
should be backed up by a human review.



(I scanned my last 2 weeks of SpamAssassin-filtered mail today; 3 
misclassifications, one of which was deliberately taunting SpamAssassin, 
the two others were from the SpamAssassin mailing list.... I have tweaked 
some of the metrics, though..)



                       Harald