Jack L. Stone wrote on Sat, 20 Sep 2003 10:08:51 -0500:

> Research has led me to believe that the "envelope from" is the most
> reliable source of the actual sender. I am prepared to be corrected
> though.... and would like to be.
>

However, in the case of a spamming virus or a spammer the sender 
address is regularly changing. The IP no. in the last Received line 
won't change if it is coming from the same sender. I'd be interested 
in such a program as well.


Kai

-- 

Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
IE-Center: http://ie5.de & http://msie.winware.org





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to