Looking at pflogsum output, it looks like my header check for one of the
latest virii is working (<x> substituted for real to address):
header
1 Subject: Re: Movies; from=<[EMAIL PROTECTED]> to=<x>
1 Subject: Re: Movies; from=<[EMAIL PROTECTED]> to=<x>
1 Subject: Re: Document; from=<[EMAIL PROTECTED]> to=<x>
1 Subject: Re: Movies; from=<[EMAIL PROTECTED]> to=<x>
1 Subject: Re: Movies; from=<[EMAIL PROTECTED]> to=<x>
Looks like that strain at least uses the same from address so I have now
added that to the appropriate map to save a few resources.
Just an FYI for those of you seeing a bunch of these.
--
Chris Scott
Host Orlando, Inc.
http://www.hostorlando.com/
407-622-8955
