Am getting way too many emails from bored, naked college girls telling me
about their web cams and pictures.
Looking for something to filter on, and they all seem to have:
Received: (from nobody@localhost)
as the initial point of origin, and then some server, usually in a foreign
country as the initial receiver.
Should any email ever originate from nobody@localhost or can I just divert
this using the iMail rules?
(Would really like to see a foreign server test to add weight)
Full headers are included below.
[EMAIL PROTECTED]
X-F: <[EMAIL PROTECTED]> Tue Mar 05 09:05:42 2002
Received: from infoweb1.east.net.cn [202.106.187.34] by CommerceStreet.com
with ESMTP
(SMTPD32-6.06) id AEC211801DE; Tue, 05 Mar 2002 09:05:38 -0600
Received: (from nobody@localhost)
by infoweb1.east.net.cn (8.9.3/8.9.3) id XAA19117;
Tue, 5 Mar 2002 23:07:27 +0800
Date: Tue, 5 Mar 2002 23:07:27 +0800
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED]
From: [EMAIL PROTECTED] ()
Subject: Free
X-RBL-Warning: Blocked - see http://spamcop.net/bl.shtml?202.106.187.34
X-Declude-Spoolname: Ddec21de.SMD
X-Note: Tests failed: SPAMCOP
X-RCPT-TO: <[EMAIL PROTECTED]>
X-UIDL: 313464610
Status: U
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
