Would it be of any benefit if we could have a test that could indicate if the FROM address is different from that of the SEND FROM that Declude detects?
A lot of SPAM comes from emails that the MAILFROM address is different from the SEND FROM that Declude identifies.
This does sound like a good test. Although it would have some false positives (like the mailing lists, as you mentioned, as well as people whose mail clients may use a "From:" of [EMAIL PROTECTED] but have a return address of [EMAIL PROTECTED]), but it would probably catch quite a bit of spam.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
