> I would advise against marking mails without "from" as spam. > > Internet RFC requires that DSN (Delivery Status Notice) not have a > "from". So, if you eliminate such, you are dropping valid/useful mails.
Possibly so. And I would also argue against dropping mails solely because they lack a From: header. But FWIW, I don't believe that I've received more than one or two mails, if that, in the last several years that lacked a from and weren't a broken spam message. I'd want to mass-check such a rule, but I bet it would be pretty decent. I do have a check for missing from and missing subject, and another for missing from and missing body. Both of those seem to only trigger on spam, at least here. Loren