I couldn't locate a message with headers to show you for the "Bogus IP: UNIX: localhost", but I did find one of the "Bogus IP: ?.?.?.?" messages, here are the headers (again, e-mail addresses changed to protect the innocent):
Received: from Unknown/Local ([?.?.?.?]) by mailcity.com; Tue, 23 Sep 2003 00:42:24 -0000
Here, the IP actually *is* "?.?.?.?" per the mailcity.com mailserver. Although Declude JunkMail did determine the correct IP of the sourec of the E-mail, it did indeed scan 0.0.0.0 in this case. Code has been added for the next release to automatically skip over non-IPs like this.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
