>A lot of spam is addressed in the to field as: [EMAIL PROTECTED]
>or [EMAIL PROTECTED] the key is this spam includes the @mx1 in
>the TO: field of the header. None of my users use an email address in this
>format, at least they shouldn't be. They either use [EMAIL PROTECTED] or
>[EMAIL PROTECTED] or their own domain name. Point is @mx1 should not
>be part of any of my users email addresses.
>
>Could I safely use a regexp header filter in IMGate to block specifically
>spam to undisclosed@mx1 (or some variant) without blocking legit mail that
>as I think should really be addressed to [EMAIL PROTECTED] or
>some such variation?
You should be safe doing that. It is not appropriate for a legitimate mail
client to alter the "To:" address.
Even though *today* [EMAIL PROTECTED] may be an acceptable alias for
[EMAIL PROTECTED], it's very likely that at some point the names of the
SMTP servers will change, and it will not be a valid alias.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
