[Full-Disclosure] Re: Empty emails?

[gabriel rosenkoetter]

On Wed, Feb 25, 2004 at 06:36:03AM -0700, James Lay wrote:
> Anyone else seeing a lot of these?
[...]
> That's it....no subject....no nuffin...been seeing a boatload lately.

These are frequently an attempt to exploit SpamAssassin's autolearn
feature. (Send a bunch of these through with nothing that SA's rules
can match, autolearn will generate a default decrement for that
sender address, then they hammer spam through for a bit. Rinse,
repeat.)

-- 
gabriel rosenkoetter
gr at eclipsed.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040225/285b99a2/attachment.bin