I need a second or third opinion here.
I've noticed a bunch of spams with totally bogus Received headers, and built
a test for the first word being from or to. Our masstest hit one FP on this
test, the following line:
Received: manually from aerotwo by eskimo.com; Wed, 27 Aug 2003
06:51:16 -0800
Is this a valid received header? The RFC seems to indicate that it isn't a
valid SMTP header, but that maybe their could be received headers from other
transports in other formats, so I'm not sure if this is just badly formatted
or what.
Is this a common enough format so that I should allow 'manually' to preceed
'from' or 'to' in my test?
Thanks,
Loren
