>Yeah they tried a similar trick with MailScanner years ago, basically dont >trust someone elses mail to tell the truth as per usual
You are right about trust, but in this case we can detect fake amavis-headers and score bigtime in a safe way. And from what I can tell from my logs it hits really hard. /MJ