I thought it was difficult to fake the "x-declude sender"?
That's the problem -- the *only* information that is very difficult to fake is the IP address that connects to your IMail server. Any other information is trivial for a spammer to fake.
Should I advise all my users NOT to have themselves in the address book to prevent spammers from exploiting this feature?
That would be recommended, yes.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
