I have noticed that many spam headers contain a "Received From:" line with conflicted ip addresses. I had thought this line was supposed to show
RECEIVED FROM: some_domain.cx [ip of domain] However I have many that look like this: Received: from 64.119.218.151.nnt6us.com [64.119.218.151] by mail Where 64.119.218.151.nnt6us.com resolves like this: Non-authoritative answer: Name: 64.119.218.151.nnt6us.com Address: 64.119.221.137 If this is some effort to hide the origin of the message could we possibly use it to better ID the message as spam? Rob Salmond Ontario Die Company (519)-576-8950 ext. 132 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
