I sent the full message to -sightings, but a message just slipped through SA that has:
Received: from infosvc.zzn.com ([62.5.186.66]) Received: from unknown (169.202.136.98) X-Mailer: eGroups Message Poster 62.5.186.66 is an IP address in .ru, and 169.202.136.98 is in .za. And as far as I can tell, eGroups was nowhere involved. Anyone care to devise a test for the presence of the eGroups X-Mailer with no egroups received headers? Also, in the base64-encoded text/html body, the sentence "Have you heard?" preceded the <html> tag. Any HTML that badly formed was probably not sent by an interactive user agent. _______________________________________________________________ Hundreds of nodes, one monster rendering program. Now that's a super model! Visit http://clustering.foundries.sf.net/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk