On or near 5/23/02 9:31 AM, Judi Sohn at [EMAIL PROTECTED] observed:

> Okay...so here is an actual header of a message I got today. Ask me at any
> moment on any day and I probably have one sitting in my deleted mail folder.
> :-( 
> 
>> Return-Path: <[EMAIL PROTECTED]>
>> Delivered-To: judis217-momathome:[EMAIL PROTECTED]
>> X-Envelope-To: [EMAIL PROTECTED]
> 
> <all the received headers snipped>
> 
>> Thu, 23 May 2002 00:57:26 +0800
>> Message-ID: <[EMAIL PROTECTED]>
>> From: [EMAIL PROTECTED]

Judging from these, another thing you might try to matching the country code
in the From or Return-Path headers. From is probably easiest, although that
is often faked; in this case it works. .TW is the code for Taiwan. If you
don't expect any legit E-mail from Taiwan you could flag all of it as junk
with rules. Nigeria (.ng) is another country that seems to send lots of
junk.
-- 
My web page: <http://home.earthlink.net/~allenwatson/>
My scripts page: <http:homepage.mac.com/allenwatson>
Microsoft MVP for Mac Entourage/Word--<[EMAIL PROTECTED]>


-- 
To unsubscribe:                     
<mailto:[EMAIL PROTECTED]>
archives:       
<http://www.mail-archive.com/entourage-talk%40lists.letterrip.com/>
old-archive:       
<http://www.mail-archive.com/entourage-talk%40lists.boingo.com/>

Reply via email to