One way you could do this is to use the following lines in a filter

#PAYPAL
REVDNS  END     ENDSWITH        .paypal.com
MAILFROM        20      ENDSWITH        @paypal.com

Also as far as I know the genuine paypal IP's are listed with BONDEDSENDER
 
David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob
McGregor
Sent: Thursday, February 15, 2007 5:17 PM
To: Declude-List
Subject: [Declude.Virus] pay-pal phishing

Anyone configured a way to stop some of the pay-pal scam emails?

thanks, bob



---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to