On Wednesday, August 28, 2002, at 01:50  PM, Robin Lynn Frank wrote:
> And if a spammer forges headers???
Header forgeries are trivially easy to detect. The main way that
spammers hide their originating IPs is not by forging headers,
but by sending through open proxy servers.  It used to be that
spammers used open relay mailserver, but these often betray the
originating IP, and the proliferation of open relay blocklists,
and the introduction of port 25 blocking on the part of many
ISPs make open relays unattractive to spammers.
One would think, that the combination of a forged Habeas-SWE,
and mail sent through an anonymizing open proxy would be a
fairly good indication of spam.  Tracking a spammer to his
meatspace location is not as difficult as you might think, once
you have legal recourse to subpoena records.
--B
-------------------------------------------------------
This sf.net email is sponsored by: Jabber - The world's fastest growing
real-time communications platform! Don't just IM. Build it in!
http://www.jabber.com/osdn/xim
_______________________________________________
Spamassassin-talk mailing list
Spamassassin-talk@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

No, hits=-22.2 required=7.0
	tests=HABEAS_SWE,KNOWN_MAILING_LIST,SPAM_PHRASE_01_02
	version=2.40-cvs

from localhost (jalapeno [127.0.0.1])
	by jmason.org (Postfix) with ESMTP id 6CDDD16F16
	for <jm@localhost>; Mon, 16 Sep 2002 19:20:19 +0100 (IST)
from jalapeno [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Mon, 16 Sep 2002 19:20:19 +0100 (IST)
from moonbase.zanshin.com (IDENT:root@moonbase.zanshin.com
    [167.160.213.139]) by dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id
    g8GIJ2C04846 for <jm@jmason.org>; Mon, 16 Sep 2002 19:19:02 +0100
from aztec.zanshin.com (IDENT:schaefer@aztec.zanshin.com
    [167.160.213.132]) by moonbase.zanshin.com (8.11.0/8.11.0) with ESMTP id
    g8GIJJh32385; Mon, 16 Sep 2002 11:19:19 -0700
Re: [SAtalk] Can someone please tell me how to get an answer from
    this list?
From schaefer@zanshin.com  Mon Sep 16 19:20:19 2002