At 11:07 14/06/2004, Nick Rout wrote:

> > header GERMANSPAM MESSAGEID =~ /^<.*[a-z].*\.qmail\@.*>/
> > describe GERMANSPAM Contains German Spam
> > score GERMANSPAM 20 20 20 20
>
>for the ignorant (Read me) what does that do?
>
>to my untutored eye it labels as germanspam anything with qmail@ in the
>messageid.

No.

>is that a legitimate call? ie can that never be legitimate to have
>qmail@ in your messageid?

It's a regular expression that catches message ID's claiming to be from
qmail which have alpha characters before .qmail. Apparently real Qmail
message id's only ever use numbers. (Seems to be bourne out by some
discussion of it on the spamassassin mailing list, with a number of people
checking it against their ham/spam corpus and finding no FP's)

Regards,
Simon

-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message