I agree with you, and you agreed with me, but I think that you missed my point.
In the example I gave, both myself and q-s think that the from address listed in the second set of "headers" (not the envelope from) should receive the warning. We both believe that ADDRESS-A should be getting the warning, yes? In real life, q-s is sending the warning to ADDRESS-C, the envelope from, the header that viruses like to make up. (eep!) This results in many warnings going to innocent bystanders. That is the problem. -Raymond > Attention: ADDRESS-A. > > <virus detected, nice message to contact support, etc> > > Your message was sent with the following envelope: > > MAIL FROM: ADDRESS-C > RCPT TO: ADDRESS-B > > Your message was sent with the following headers: > > From: ADDRESS-A > To: ADDRESS-B > Subject: <blah> > Date: <blah> __________________________________________________ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/