SUBJECT 0 CONTAINS fwd: SUBJECT 0 CONTAINS fw:
There's a very strong indicator of a forwarded message in the body, though some things like Web mail clients might not include it:
BODY 0 CONTAINS original message
Also, when a message is attached as a result of forwarding, the following will also appear:
BODY 0 CONTAINS message/rfc822
Like Bill, I don't recall seeing Fd in legit E-mail.
Matt
John Tolmachoff (Lists) wrote:
What are the normal forwarded message indicators in the subject line?
Fwd: Fd:
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
