[Spambayes] Spamvolution

[Charles Cazabon]

Tim Peters <tim.one@comcast.net> wrote:
> 
> What we may be left with is spam like this (a persistent false negative in
> my test data):
> Return-Path: <kba94@earthlink.net>
> Delivered-To: bfsmedia-bluegoose.kennels@bfsmedia.com
> Received: (qmail 16482 invoked from network); 11 Mar 2002 16:01:28 -0000
> Received: from harrier.mail.pas.earthlink.net (HELO
> harrier.prod.itd.earthlink.net) (207.217.120.12)
>   by agamemnon.bfsmedia.com with SMTP; 11 Mar 2002 16:01:28 -0000
> Received: from pool-209-128-140-231.gent.ipa.net ([209.128.140.231]
> helo=13vys)
>         by harrier.prod.itd.earthlink.net with smtp (Exim 3.33 #1)
>         id 16kSN8-0004nj-00; Mon, 11 Mar 2002 08:10:04 -0800
[...] 
> What the hell was *that* all about <wink>?  It actually scores very near the
> spam threshold, because bfsmedia.com shows up in the headers, and they're
> the source of many surreal spams of this nature.

Sorry, Tim, but that's not correct.  Bruce was my cubicle-mate while he was
collecting most of that spam, and "bfsmedia" is the company that owns the
machines that mail was collected on (they're about ten meters from where I'm
currently sitting).  The source of this message was actually
pool-209-128-140-231.gent.ipa.net ([209.128.140.231].

I'm not so sure this false negative isn't actually a true negative, or at
worst a misaddressed piece of mail.  It doesn't appear to have been trying to
sell anything.

> Or perhaps this really is ham!  Both URLs are legit, and still in business.

My thoughts.

munching-on-ham-'ly,

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                 <python-spambayes@discworld.dyndns.org>
GPL'ed software available at:     http://www.qcc.ca/~charlesc/software/
-----------------------------------------------------------------------