[spambayes-dev] RE: [Spambayes] Stamina-RX

[Tony Meyer]

> My theory is that it's a "priming the pump" attack against 
> greylisting and similar systems.  ie. send 1 mail first with no content
> -- which will always be considered non-spam, in terms of body tokens at 
> least, and will whitelist the sender somehow; then send the real spam
> later, possibly through the same relays with the same headers, so that
> the whitelisted sender will get the spam through.

An interesting idea, although I doubt that it would work (which isn't to say
that this isn't what they're trying to do).

> The other possibility is that it's just simply broken spamware ;)
> 
> I have the spam body text for that, captured at another address BTW.

I haven't ever received one of these - headers only, or full - apart from
via the spambayes list.  I guess I'm just not on one of the lists :)

Oh well, since you've confirmed that it is spam, I know that I can simply
train spambayes to recognise it as such.  (I was hesitant, because there was
a slight wonder whether Stamina-RX was a poorly named software product that
someone wanted spambayes to work with and was having trouble posting).

=Tony Meyer