The kill.lst is only used for E-mail addresses, and uses the return address ("MAIL FROM" from the SMTP envelope) to determine what address to block. You'll need to look at the IMail SMTP log files for this E-mail to determine the address (or if using Declude JunkMail, you can look at the X-Declude-Sender: header).Below is a header of junk mail I received. I am trying to dertermine which address to put in my kill.lst file.
The one header that you can block on (without using a filter) is:
you can use the control access file to block 66.8.37.10 from sending mail to you. However, in many cases, open relays are fixed pretty quickly once abused, so it may just block the spam for a day or so.Received: from ebcis [66.8.37.10] by mail.moragg.com (SMTPD32-7.13) id A9B51D00BDA; Sat, 26 Oct 2002 21:15:01 +0200
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
