Hi Robert and list, It seems that this test looks whether there is two or more full stops in the domain of a sender.. Am I correct? Shouldn't it be three or more? Otherwise you'd penalise blah.org.fr (for example).. and raise the false alarm rate for many normal international sender addresses.
thanks, Riaan
