tj> In some cases, not necessarily this one, SpamReview will use tj> mindspring or the reply address where as Declude will say it's from tj> a different address.
SW> Sounds like a pretty useless app, if so. Not entirely, it allows you to read the message headers, re-que, delete, or hold it in another directory. It's allot easier than using notepad or some other editor. Being able to review the message this way allows you to sometimes see a common thread that some spammers may use. This can help some develop better filters and applications to help catch spam. SW> You would go after the second-level domains of faked intermediate SW> gateways? This is going to be counterproductive, since the only good SW> reason to use such fake Received: lines is to throw legitimate hosts SW> into the mix. Not exactly, I actually verify each and every site before I consider listing them in my kill file or ISP file. This is a fair amount of work, however, it has been paying off for us. The names in the kill file are cleaned out after X number of days by a program if they have not been in use. You can basically consider it a slap on the wrist to those spammers, since they will move on to another address while other lists get overly congested with bogus and/or useless addresses. -> like a virus, spam can be a never ending battle, however, -> we never stop fighting it. If we did, McAfee and Symantec -> would be poor. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
