headers - example

[Tig]

On 08 Mar 2004 08:54:04 -0500
Tom Anderson <tanderso at oac-design.com> wrote:

> David,
> 
> "hotmail.com" should not show up individually in the "to:" token.  It
> should be a full email address.  This way bogofilter would
> automatically maintain a white/black list (weighted) for you.  The
> domain alone should not be a strong indicator, as you may receive a
> large majority of your hams from domains such as hotmail and yahoo and
> aol, and only occasional spams from these same sources.  The fact that
> it came from that same email service as some of your friends use does
> not predict that it is ham.  However, if you left the "@" out of the
> list of splitting characters (include it in valid token characters),
> then a full email address is fairly indicative of ham or spam
> (assuming the to: is not the same as the from:).  "friend at hotmail.com"
> will be hammy while"spammer at hotmail.com" will be spammy.  Meanwhile,
> "friend at yahoo.com" may also be a spammer, so shouldn't receive special
> recognition just because they use the same handle as
> "friend at hotmail.com".  Hotmail and yahoo should remain neutral, as the
> domain should not be registered or classified seperately.  Do you see
> the logic of this?
> 
> Tom
> 
> 

Personally, I think the split on the @ is important.

Some of todays spam ...

tigger at piglet:~/Mail/SPAM% grep -E hotmail.com\|yahoo.c * | grep From:
101:From: "Courtney " <xubyjzamjxu at yahoo.com>
108:From: "Shelly Matos" <oaabcu at yahoo.com>
11:From: napalmmani at yahoo.com
110:From: "Elias Huerta" <dbtxnugu at yahoo.com>
111:From: "Earnestine Battle" <pprrkcl at yahoo.com>
112:From: "Helen Stark" <pbyffalvvvet at hotmail.com>
113:From: "lance" <nimrod21asdfghjk at hotmail.com>
119:From: "Denver Poe" <75ibaceexe at yahoo.com>
121:From: "Nettie Bunch" <hqxvjn at hotmail.com>
124:From: "coleman" <blondie21wombat at hotmail.com>
129:From: "Maritza Hunt" <wvrmxaehrakivh at yahoo.com>
23:From: "Raul Call" <HWHLNTOYQVKS at yahoo.com>
24:From: "Cesar Ramsey" <zvvxwrt at yahoo.com>
3:From: "alden" <hanna21wanker at hotmail.com>
30:From: Danielle718 <danielle718 at hotmail.com>
31:From: Coolg69 <coolg69 at hotmail.com>
40:From: "curtis" <larry121redrum at hotmail.com>
44:From: =?Big5?B?uNayWw==?= <aa at yahoo.com.tw>
46:From: "quentin" <safety21fozzie at hotmail.com>
48:From: PermissionMail <kayakari at yahoo.com.au>
50:From: "tigger " <tigger at hotmail.com>
6:From: witchdawn at hotmail.com
77:From: "norman" <larry21cynthia at hotmail.com>
79:From: "Margarita Maxwell" <CKULFWINZ at yahoo.com>
92:From: =?GB2312?B?09W78w==?= <1234 at 33yahoo.com>
97:From: "Chester Gioe" <GioeChe at hotmail.com>