Just wanted everyone to know something about Spam and SpamReview. As you may already know, I get spam and I use SpamReview to help gather addresses before I verify them and add them to the kill file. I think it's a valuable application, however, I still have to add allot of addresses manually. You see, spammers are slick and it may seem as though these messages are coming from yahoo or hotmail, however, they are not. They are coming from different systems with open relays or mass-mailing servers, and this poses a problem. Spamreview and programs alike do not see all of these addresses, so they can not automatically write them to your kill file. You have to look at the headers to figure it out. Sometimes that's not even easy since the headers can be forged so well, you wouldn't be able to figure out what or where it came from. Take a look at the following very short header example:
---------------------------------------------------------------- From: xxybr.cn.br.ub Received: from jock.fake.me.net.br Received: from hitchcock.mail.mindspring.net Received: from mailft-ne2.fiestatwist.net ([64.191.23.52]) by payne.mail.mindspring.net Received: by mailft-ne2.fiestatwist.net (envelope-from <[EMAIL PROTECTED]>) Received: from mail12-41 (10.134.122.151) by 10.0.0.2 Message-ID: <[EMAIL PROTECTED]> From: Fiesta Twist <[EMAIL PROTECTED]> ---------------------------------------------------------------- In some cases, not necessarily this one, SpamReview will use mindspring or the reply address where as Declude will say it's from a different address. You see the dilemma, I would go after all of them, something's gota eventually byte. Anyway, the purpose of this e-mail was to inform you of a small problem with using an application such as Spamreview. You shouldn't just add every address you see in SpamReview you may need to look further into the message headers to find the correct address. Good Luck, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.