Dan,
I have several tests I made myself, which if I wanted to, could drop to
2 or 3, however, here is what I would do. FWIW - I'm by no means an expert
here, trial and error gets you through it.
> X-Declude-Sender: [EMAIL PROTECTED] [211.241.219.3]
This line is your best friend! <well, I refer to it alot =) >
I have a fromfile list, which I would place the address in, I also have
an IP list that I use to track repeat offenders. I'd put 211.241.219.3 in
that list. If I see repeated mailings from that address, it eventually makes
it to imails SMTP ACC list. Right or wrong, I don't know, but it's what I do
and has worked well so far. Also, the email addy could be added to Imails
kill list, but chances are they won't use that address again. Scott also
mentioned the CONTAINS for body text etc. Also very useful for when they
send mass mailings through compromised servers - different IPs but same
messages.
Comments gang? Too much?
Paul
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
