Hello,

We've been getting a lot of spam that is sent from the same address as
the recipient.

Example:

From: <name>@vonl.com
Reply-To: [EMAIL PROTECTED]
To: <name>@vonl.com
Subject: Grants, No-Repay & Low Finance Info!  Federal Grants Included!
Time:4:43:53 AM

The mail was delivered from:

Received: from projx.com [67.105.169.234]

Is there any way for Declude to catch this and say, because
67.105.169.234 is not mail.vonl.com, but the from address is an
@vonl.com address this message is spam.

Here's the complete header:

Return-Path: <[EMAIL PROTECTED]>
Received: from server11.vonl.com ([209.94.224.18]) by server10.vonl.com
          (Post.Office MTA v3.5.3 release 223 ID# 0-53618U2000L2S100V35)
          with ESMTP id com for <name>@vonl.com>;
          Sat, 20 Apr 2002 11:32:52 -0500
Received: from projx.com [67.105.169.234] by server11.vonl.com with
ESMTP
  (SMTPD32-7.00) id A82CDE0122; Sat, 20 Apr 2002 11:32:44 -0500
Received: from html (206.216.197.22) by projx.com with SMTP (Eudora
 Internet Mail Server 3.0); Sat, 20 Apr 2002 11:02:26 -0400
From: <name>@vonl.com
Reply-To: [EMAIL PROTECTED]
To: <name>@vonl.com
Subject: Grants, No-Repay & Low Finance Info!  Federal Grants Included!
Time:4:43:53 AM
Date: Sat, 20 Apr 2002 04:43:53
Mime-Version: 1.0
Content-Type: text/html; charset="DEFAULT"
Message-ID: <[EMAIL PROTECTED]>
X-RBL-Warning: This E-mail was sent from a broken mail client
[8040000e].
X-RBL-Warning: This E-mail was sent from a mail server [No Reverse DNS]
with no reverse DNS entry.
X-Note: This E-mail message was examined for SPAM by Declude JunkMail.

Corey Travioli
Village Online - Network Administrator
440 Benmar Dr. Suite #2075
Houston, Texas 77060
Phone: 281-820-1234 x204
Fax: 281-539-2390
E-Mail: [EMAIL PROTECTED]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to