Matthias Leisi wrote, On 1/02/10 9:46 AM: > Does it come from a unique IP range?
In my one example it looks like the vendor sent it themselves to an address that they were provided ***[email protected] and from there it went through Google's processing. I guess I could test for a To address of *...@checkout.*.google.com as long as I could be sure that it really went through the google.com MX server rather than have a bogus To address and Bcc'd to me. I could make use of X-Spam-Relays-Trusted in a header rule, but I'm not sure how to distinguish between mail sent to the *...@checkout.*.google.com and mail that is Bcc'd to my gmail address with a bogus checkout To address. -- sidney
