On Fri, 10 Jul 2009, SM wrote:
Multiple addresses rarely appear in the From: header.
...and because of that it might be a useful spam sign worth a point, even though it's completely valid syntax.
It's better to have a rule for the multiple addresses in the Sender: header if you are receiving a lot of spam with the above headers.
I'd say look for it in both, as well as in Reply-To: -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- The Constitution is a written instrument. As such its meaning does not alter. That which it meant when adopted, it means now. -- U.S. Supreme Court SOUTH CAROLINA v. US, 199 U.S. 437, 448 (1905) ----------------------------------------------------------------------- 10 days until the 40th anniversary of Apollo 11 landing on the Moon
