[seqfan] Beware of false-positives

Frank Ellermann Frank.Ellermann at t-online.de
Sat Jul 19 05:18:23 CEST 2003


Antti Karttunen wrote:

> I think now it would be just enough to swap the To: and Cc:
> fields, so that To: would contain the address of the reserver
> and Cc: the address of Neil, so there would be only 6 - 1.5 =
> 4.5 points,

Changing a correct mail robot only to bypass a broken Spam
filter makes no sense, fix the filter.  From = To is a valid
reason to tag mails, that's not the problem.  But that...

> SpamAssassin 2.42 (1.115.2.14-2002-10-04-exp)
................................^^^^^^^^^^^^^^... might be a
problem, and this...

> [RBL check: found 10.225.20.192.orbs.dorkslayers.com.

...is very dubious.  Dorkslayers.com WAS a block list listing
only non-US-servers for invalid reasons and without any way to
unlist a server.  The dorks were taken out of business by a
DDoS some weeks ago - good riddance - and you shouldn't see a
10.225.20.192.orbs.dorkslayers.com

192.20.225.10 is akpublic.research.att.com and not listed in
any blocklist, compare <URL:http://rbls.org/?q=192.20.225.10>
or check out `host 10.225.20.192.orbs.dorkslayers.com`

Maybe somebody at your system uses unreliable AND obsolete zone
files - without the dubious 2.2 ORBS points all would be okay.

> So maybe also one could use lowercase in the subject, e.g.
> something like OEIS: New A-numbers, etc.

We wouldn't round Pi to 9 digits... :-(  LART your postmaster.

                          Bye, Frank






More information about the SeqFan mailing list