Re: vger weirdness

George Bonser (grep@shorelink.com)
Sat, 15 May 1999 17:55:00 -0700 (PDT)


On Sun, 16 May 1999, Matti Aarnio wrote:

> My opinnion about considering "X-UIDL:" as a sign of spam is that
> the idea is misguided. All in all, an evolutionary view at the
> spammers can show that for every *simple* countermeasure we use
> against some simple signature characteristics, the spammers will
> adapt fairly quickly. The only truly effective way to block the
> spammers is to have message content analysing system which does
> recognize spams out of non-spams.

Until now, I have never gotten a single message with an X-UIDL header that
was not spam. The common spamming software that people use that adds a
bunch of bogus headers also always adds an X-UIDL header for some reason.
I suspect that this is because the authors know little about email and
simply inspected the email that they downloaded from their ISP as an
example of how to construct headers.

I have modified my filtering rules for kernel list mail to get around this
particular check. BTW, I do not reject such mail, I simply freeze it
until I can inspect it.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/