Re: trapping rubbish?

On Tue, 31 Jul 2007, Jari Fredriksson wrote:

> hamann.w@t-online.de wrote:
> > looking at a piece of spam that was scored low, I noticed
> >
> > X-Originating-IP: [383.552.476.5]
> >
> > Wouldn't that be a nice thing to score on?
> >
> > Wolfgang Hamann
>
> Bayes learns it. What's so nice in it in your opinion?

An obvious spam sign.

untested rule:

header XIP_bogus X-Originating-IP =~ /[\[\.](?:25[6-9]|2[6-9][0-9]|[3-9][0-9][0-9])[\]\.]/ score XIP_bogus 3.00

--
 John Hardin KA7OHZ                    
http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  It is not the business of government to make men virtuous or
  religious, or to preserve the fool from the consequences of his own
  folly.                                              -- Henry George
-----------------------------------------------------------------------
 4 days until The 272nd anniversary of John Peter Zenger's acquittal