Scott: I set up a filter of MAILFROM 0 STARTSWITH [EMAIL PROTECTED] I am only holding right now.
The following was caught. Notice the "coups@" is in the Received: line, not the From: line. Should this one have been caught or skipped? BTW, in 24 hours have caught around 600 msgs with this and similar "sender@" filter with zero false positives. Your mileage will vary. :) Thanks, John Received: from pmk77.productsmarket.com [206.71.59.77] by bobcat.jcjc.edu with ESMTP (SMTPD32-8.12) id A13216CF00C4; Thu, 30 Sep 2004 13:32:18 -0500 Received: by pmk77.productsmarket.com (PowerMTA(TM) v1.5); Thu, 30 Sep 2004 04:34:21 -0700 (envelope-from <[EMAIL PROTECTED]>) Subject: Smile Day Wishes and Poetry contest From: [EMAIL PROTECTED]<[EMAIL PROTECTED] et.com> --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
