On 2004-01-13 08:59:14 -0800, Steve Lamb wrote:
> Quite so. Remember that for a while TheBat! was spoofed as a
> spam client. For about 2 years anyone blocking just on X-Mailer
> would have nailed me and about 3 dozen other people I conversed with
> on a regular basis. X-Mailer is a program generated line and is
> inheriently untrustworthy.
What about mPOP Web-Mail? Does anyone know if it is spoofed or is it a
web-mail server that is often misconfigured or some software that makes
sending spam easy or something else?
BTW, I found some "spam by mail client" stats with Google:
http://www.visi.com/~drow/spam/ (but perhaps not up-to-date).
But I couldn't find any official web page for this mailer.
> Blocking on untrustworthy data is a bad idea. Scoring on it is a
> much better route.
For the moment, I reject this if both X-Mailer contains "mPOP Web-Mail"
and there is a "Content-Type: multipart/alternative" header. People
should use text/plain anyway. :)
--
Vincent Lefèvre <vincent@???> - Web: <
http://www.vinc17.org/> - 100%
validated (X)HTML - Acorn Risc PC, Yellow Pig 17, Championnat International
des Jeux Mathématiques et Logiques, TETRHEX, etc.
Work: CR INRIA - computer arithmetic / SPACES project at LORIA
