No -- Declude does not do any checking of the return address. The problem is that sooo many people send themselves E-mail in the "Bcc:" header that it isn't very realistic to use.I believe Scott mentioned that this behaviour counted as spammish behaviour in SPAMHEADERS, but I think a more pointed ruleset would be very effective against this kind of spam.
However, we are thinking of some ways to get around that serious limitation.
Note that while the HELOBOGUS and REVDNS tests are signs of a sloppy admin, the MAILFROM and BADHADHEADERS tests indicate RFC violations that aren't trivial. In the case of MAILFROM, bounce messages won't be deliverable, and in the case of BADHEADERS, the E-mail may just disappear. Those are problems that must be fixed.I've found that HELOBOGUS, REVDNS, BADHEADERS and MAILFROM are all really good indicators of spam, but that they are also indicators of a sloppy mail admin and are thus way too common with normal mail. I've lowered their weight, therefore, my HOLD weight is high enough to not hit on them in combination.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
