I do filtering at the server, so I don�t have a way to test this theory... Create a rule set to If specific header Date: contains --
All these worms have a non RFC date header with a leading -- in them. I have blocked over 500,000 of them at the mailserver with a rule that blocks -- in the date header. -- ------------------------------------------------------------- Scott Haneda Tel: 415.898.2602 http://www.newgeo.com Fax: 313.557.5052 [EMAIL PROTECTED] Novato, CA U.S.A. -- To unsubscribe: <mailto:[EMAIL PROTECTED]> archives: <http://www.mail-archive.com/entourage-talk%40lists.letterrip.com/> old-archive: <http://www.mail-archive.com/entourage-talk%40lists.boingo.com/>
