header FROM_MYFANBOX From:addr =~ /\@myfanbox\.com$/i
We've blocked 208.69.101/24 at the SMTP level since December 2008 because of user reports about spam. To stay on this long (and this is a very long time) means both that they keep sending and that no one here has ever asked us to allow the mail. The samples were from f...@fanboxnotes.com and nore...@fanboxnotes.com. They look like the ones reported here, including the lower-case header labels. Joseph Brennan Columbia University Information Technology