> ALL mail headers can be forged. Using easily forgeable Received: headers > for validation is useless. True, but can they be forged properly is the question. I've caught enough spam to see that it falls into specific patterns and if I can block half or more of it because it falls into a pattern of having recognizably forged headers then it's a good thing. I'm going to rewrite the function to just contain the IP address checked so that if a machine announces itself as an IP and the IP does not match the actual IP that sent the mail then it's spam. That's good for 10%-15% of the spam right there.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm