> How do you determine when to use an entry like > .ac-mail.net > versus an entry like > @123jumo.com
This depends on the address the spammer used, I always try to use .abc.com if and when possible, however, some spammers send mail using the root address. If the spammer uses [EMAIL PROTECTED] I would then use .domain.com since most spam addresses will show the following: @mail1.domain1.com @mail2.domain1.com @mail3.domain1.com We would use .domain1.com. You need the dot where the name is too short otherwise you may catch other domain names ending with domain1.com. You may also want to use @domain.com to be safe. This is why I requested an OR command for the Kill List, so it can trigger on "." OR "@" symbols. If the spammer uses [EMAIL PROTECTED] then we just remove the spammers name since that usually changes anyway. The end result would be @domain2.com So in-conclusion the best remedy would be: @domain.com .domain.com to catch both types of addresses. Just keep in mind, each web site should be checked first otherwise you might lock out a valid ISP. Another thing you may want to consider is where the e-mail address is coming from, if you get e-mail from HOTMAIL you might not want to block it. These addresses are infamous with SPAM, but they come from an E-MAIL Service Provider and using these addresses would overwhelm your kill list, not to mention CPU cycles. Plus they don't typically use the same address over and over. Best Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .