Yes, that would work. In this case, any E-mail with "@xxxmail.com" in the headers would get caught (no matter what the return address is).Ok, I just thought of another possible use. <somebody STOP me! LOL>would the following work? HEADERS 10 CONTAINS @xxxmail.com when @xxxmail.com appears in the from line, NOT X-Declude sender? I've seen quite a lot of this type, where you would like to say "ok, block @xxxmail.com." but the actual X-Declude line says @somewhere.com. This line changes almost every time.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
