[98 Guy]

I've been looking at some spam I've been getting recently and noticing specific OE version numbers in the X-Mailer line. I don't see those same versions in my own e-mail. Here are some examples:

6.00.3790.4682
6.00.3790.2962
6.00.3790.1106
6.00.3790.181
6.00.2900.2963
6.00.2900.2969
6.00.2800.2962
6.00.2720.4682
6.00.2600.4682
6.00.2600.1409

Is there a conveinent way I can determine if any of those are actual OE versions? Possibly for which OS, and when they would have been the current OE version?

[uid0]

A convenient way would be to borrow rules from spamassassin, but they don't appear to do this - presumably it is so easy for a spammer to find a real version number to use?
Apparently you can check custom rules against a mailbox, but I've not tried it:
http://wiki.apache.o...assin/MassCheck
The long winded way would be to download all the historic OE patches for all windows versions (and all languages?) and check them all...

[98 Guy]

> A convenient way would be to borrow rules from spamassassin,
> but they don't appear to do this

I have many rules for filtering spam based on the X-mailer line that I use with my e-mail client (Netscape Communicator 4.79). I don't know how powerful or flexible spam assassin is, but I really don't need to use a third-party pre-filter.

> presumably it is so easy for a spammer to find a real version number to use?

Yes, many spams have real or actual legit versions of OE, but as I've posted, I'm seeing new OE versions every week, and I can't find any indication they are real.

> The long winded way would be to download all the historic OE
> patches for all windows versions (and all languages?) and check
> them all...

I do web and usenet searches for the OE versions I've posted, but (a) I get only a handful of hits, and ( all the usenet hits are in NANAS.

In the past day I've got 3 more:

6.00.2800.2963
6.00.2720.1409
6.00.3790.2963

Does anyone know what 6.00.2720.xxxx is possibly for?