Scott, here are the headers from a recent spam message, and I am wondering how "X-Declude-Sender" came up with <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] as the sender address:The "X-Declude-Sender:" header reports the return address of the E-mail. The return address is what the remote mailserver sends in the "MAIL FROM:" SMTP command. If you look at the IMail SMTP log file, you'll see a line "MAIL FROM: <[EMAIL PROTECTED]>".
The return address is often different from the address(es) in the From: or Reply-To: headers.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
