I'm not sure of my terminology here. The MAILFROM tests the e-mail address referred to as the Declude Mailfrom. There is also a "displayed" mailfrom that is displayed in the e-mail client and can be quite misleading.
It would be interesting to have a variable to check the "displayed" mailfrom. I am thinking of something like this to punish ebay phishs: DISPLAYMAILFROM END NOTCONTAINS EBAY.COM MAILFROM END CONTAINS EBAY.COM MAILFROM 10 NOTCONTAINS EBAY.COM Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
