Here's a new trend I am starting to see: hundreds of emails from broadband IP's, each with an absolutely minimal real header, and a long faked header _in the body_ of the mail. It appears that someone has unleashed a broken zombie mailer. A simple BODY test or two could weed these out, though so far none have been false negatives here.
sample emails at: http://frodo.bruderhof.com/newspam.txt regards, Pierre Thomson BIC
