On Fri, Jan 25, 2002 at 08:38:07PM -0500, Dave C. wrote:
| On Fri, 25 Jan 2002, Terry Shows wrote:
| > Does anybody know of a way to search ALL of the "Received:" headers in a
| > message to see if it originally came from a known spammer, no matter how
| > many other machines it may have been routed through.
|
| Since there is absolutely no standard format for the Received: header
| this would be very difficult.
I spamassassin does this. It looks for what appears to be an IP in
the Received: header and then checks the RBL. The default score
ranges from 2.0 to 5.0 (with the default threshold of 5.0) depending
on which RBL the relay was listed in.
HTH,
-D
--
After you install Microsoft Windows XP, you have the option to create
user accounts. If you create user accounts, by default, they will have
an account type of administrator with no password.
-- bugtraq
