Look at Time Jackson's Bogus Virus Warning ruleset.  It is designed to catch
backscatter of this general sort.  Might not handle your exact case, but
worth a try.

        Loren

Reply via email to