Jack L. Stone wrote on Sat, 20 Sep 2003 10:08:51 -0500: > Research has led me to believe that the "envelope from" is the most > reliable source of the actual sender. I am prepared to be corrected > though.... and would like to be. >
However, in the case of a spamming virus or a spammer the sender address is regularly changing. The IP no. in the last Received line won't change if it is coming from the same sender. I'd be interested in such a program as well. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk