I have attached a piece of spam that I'm trying to figure out how to filter for. Since the sender is supposedly a Hotmail.com address and it obviously wasn't generated from one of Hotmail's servers, does that make this type of spam a good candidate for the SPAMDOMAINS test?
I think the answer is yes, but I wanted confirmation.
You're 100% correct. :)
The return address is [EMAIL PROTECTED], but the reverse DNS entry is mxout1.netvision.net.il. So if you have a line in the spamdomains file that begins with "hotmail.com" (IE "hotmail.com" or "hotmail.com msn.com"), this E-mail would get caught.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
