On Mon, 12 Apr 2004, Niels Bakker wrote:
* lists-nanog@silverwraith.com (Avleen Vig) [Mon 12 Apr 2004, 06:56 CEST]:
Forward abuse@ for all domains to just one account. Repeat for each role account. Run spam assassin, or other spam limitting software of your choice (realize that false positives are possible).
Possible? Make that very likely, as reports of UCE/UBE generally include the original mail. Those *will* trip word counters and bayesian spam filters like SpamAssassin.
There should be options to override this (there are in spamassassin) to whitelist from domains (eg spamcop.net) and to addresses (eg abuse@). You must do this else as you say you will drop a lot of the complaints.. most do include the original spam, and those that dont are useless anyway! Steve