Got another one for you. Check out the DNS for this spammer's domain: e247.com
The MX points to "localhost". The MAILFROM test does not catch this yet, but probably should.
Good catch. It was only detecting MX/A records that returned an IP of 127.0.0.1, but in this case e247.com returns an MX record of "localhost" but doesn't include the corresponding A record pointing to 127.0.0.1. The next release will cause this to fail the MAILFROM test.
-Scott
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
