I wonder if it might not be more effective to check the received from header
for paypal.com instead of the message-id. My thought there is, although
this rule holds true for paypal, it does not for ebay. Where as matching
the domain in both the from and received from fields you should always have the valid smtp address for the domain.
Not true.. You can fake both From: and recieved headers..
Cami
