Scott..
Before trying this
.. would this work?
BODY 0 CONTAINS
%REMOTEIP%
interesting when
someone refers to the IP address that the email is being sent from. I have
seen some spam that come from the same IP that the email has in its body for the
recipient to visit.
Regards,
Kami
