I'm getting a lot of spams that all have a series of completely bogus Received headers in them. A characteristic of these headers is a rather improbable datestamp, considering today's date:

Received: from 69-171-232-143.mail-mail.facebook.com ([69.171.232.143])
by oxsus1nmtai03p.internal.vadesecure.com with ngmta
id 0574d1a8-1628c15907fbaba1; Thu, 06 Aug 2020 18:30:56 +0000

Note that this message must have been in flight for about a year and a half according to that header.

Anyone know an easy way to check for a Received header date more than say a week old and add some points?

       Loren

Reply via email to