[antispam-f] Re: Rule with And action
- From: Dave Barnett <as10@xxxxxxxxxxxxxxxxx>
- To: antispam@xxxxxxxxxxxxx
- Date: Fri, 03 Nov 2006 10:40:00 GMT
In a recent message Harriet Bazley
<lists@xxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> On 2 Nov 2006 as I do recall,
> Jeremy C B Nicoll wrote:
>
>> I hope you're not going to delete stuff based just on an 8 hour time
>> difference and use of a specific version of mailing software?
>>
> I'm already deleting them based (by observation) on that same version
> and by minimum size - I'm rather assuming they're all coming from a
> single infected machine, unless it's a weakness in that specific
> Microsoft release that means lots of viruses have got hold of it.
> So far I've had 85 spams and no false positives; that's an awful lot of
> spam I'd have otherwise had to delete manually. All very short
> messages coming from that specific MimeOLE source have been spam.
>
At what length do you cut off?
I am not so sure about a single machine. A single batch all located
in California or Mexico maybe.
--
Dave
Keep GMT all year
Other related posts:
