Mark Little wrote: > Recently I have seen an influx of SPAM including a fake Received: from > header (not something new), but what is strange is the IP included is the > hosts actual IP address and not a fake one. > (Examples below) > > So I have been trying to work out how to add an ACL to be able to scan for > this - because as far as I am concerned I should never be receiving an > email from an IP address that includes "Received: from [<same IP>]".
Don't! There are legitimate reasons for such headers. -- B. Johannessen <[email protected]> - GSM: +4797152009 Johannessen Design Bureau - http://www.db.org/ -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
