Re: [Declude.JunkMail] Return address

[R. Scott Perry]

We are seeing more and more SPAM that have IP address as return address. I just can't think of a legitimate email that would do that.

Actually, what is happening here:

X-Declude-Sender: <> [12.4.218.17]

is that the spammer is using a null return address. In this case, the return address is "<>", which happened to be sent from the IP 12.4.218.17.

Was there a decision made on how to treat these?

This is what you will see for all bounce messages (and delivery status notifications), which makes it more difficult to handle.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.