We have bee receiving apam with a sernder addres like the following
X-Declude-Sender: [EMAIL PROTECTED]
Would I be safe on filtering mail that has "*" in X-Declude-Sender or not. I have not seen a non-spam have a sender address like this.
Although it is technically valid to have a "*" in the domain name, it doesn't seem to be common in legitimate E-mail. I'm guessing there may be some mailing lists that use it, though. Checking the "From:" header (not the actual return address), none of our recent legitimate E-mail (including a number of mailing lists) had a "*" in there.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
