98 Guy Posted May 20, 2008 Share Posted May 20, 2008 I've been looking at some spam I've been getting recently and noticing specific OE version numbers in the X-Mailer line. I don't see those same versions in my own e-mail. Here are some examples: 6.00.3790.4682 6.00.3790.2962 6.00.3790.1106 6.00.3790.181 6.00.2900.2963 6.00.2900.2969 6.00.2800.2962 6.00.2720.4682 6.00.2600.4682 6.00.2600.1409Is there a conveinent way I can determine if any of those are actual OE versions? Possibly for which OS, and when they would have been the current OE version? Link to comment Share on other sites More sharing options...
uid0 Posted May 21, 2008 Share Posted May 21, 2008 A convenient way would be to borrow rules from spamassassin, but they don't appear to do this - presumably it is so easy for a spammer to find a real version number to use?Apparently you can check custom rules against a mailbox, but I've not tried it:http://wiki.apache.org/spamassassin/MassCheckThe long winded way would be to download all the historic OE patches for all windows versions (and all languages?) and check them all... Link to comment Share on other sites More sharing options...
98 Guy Posted May 22, 2008 Author Share Posted May 22, 2008 > A convenient way would be to borrow rules from spamassassin, > but they don't appear to do this I have many rules for filtering spam based on the X-mailer line that I use with my e-mail client (Netscape Communicator 4.79). I don't know how powerful or flexible spam assassin is, but I really don't need to use a third-party pre-filter.> presumably it is so easy for a spammer to find a real version number to use?Yes, many spams have real or actual legit versions of OE, but as I've posted, I'm seeing new OE versions every week, and I can't find any indication they are real.> The long winded way would be to download all the historic OE> patches for all windows versions (and all languages?) and check> them all... I do web and usenet searches for the OE versions I've posted, but (a) I get only a handful of hits, and (B) all the usenet hits are in NANAS.In the past day I've got 3 more: 6.00.2800.2963 6.00.2720.1409 6.00.3790.2963Does anyone know what 6.00.2720.xxxx is possibly for? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now