Lately, I'm seeing a bunch spam that has sender address like so:
[EMAIL PROTECTED]
The host/domain part is variable, but the left-hand part is always 'bounceto', then 5 digits, then 10 digits. I use Junkmail Standard (and hence no fancy filtering). I'm thinking of writing a custom test to look for sender addresses in this specific format.
Does anyone else see these kind messages? I'll probably make the test available for download when I've got it working.
--
--------------------------------------------------------------------
(After 9/11) We see with sudden clarity what matters and what before was only clutter in the hearts and minds of an overfed populace. Political Correctness -- the art of camouflaging truth to protect the psyches of the silly -- is, after all, a luxury of full stomachs
- Kathleen Parker
---------------------------------------------------------------------
Bud Durland, CNE Mold-Rite Plastics
Network Administrator http://www.mrpcap.com
---------------------------------------------------------------------
--- [This E-mail scanned for viruses by Declude Virus / Sophos AV]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
