----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 15, 2001 10:39 AM Subject: Re: [IMail Forum] Spam and IMGate
> > >A lot of spam is addressed in the to field as: [EMAIL PROTECTED] > >or [EMAIL PROTECTED] the key is this spam includes the @mx1 in > >the TO: field of the header. None of my users use an email address in this > >format, at least they shouldn't be. They either use [EMAIL PROTECTED] or > >[EMAIL PROTECTED] or their own domain name. Point is @mx1 should not > >be part of any of my users email addresses. > > > >Could I safely use a regexp header filter in IMGate to block specifically > >spam to undisclosed@mx1 (or some variant) without blocking legit mail that > >as I think should really be addressed to [EMAIL PROTECTED] or > >some such variation? > > You should be safe doing that. It is not appropriate for a legitimate mail > client to alter the "To:" address. > > Even though *today* [EMAIL PROTECTED] may be an acceptable alias for > [EMAIL PROTECTED], it's very likely that at some point the names of the > SMTP servers will change, and it will not be a valid alias. > > -Scott Would periodically cycling the DNS name of my MX machine put any sort of a damper on the less persistant spammers? Or would it have no effect since the "real" recipient is usually list in the "X-Recip-To:" field. Mike Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
