  pleekmo Triptoe Through The Tulips Premium join:2001-09-14 Manchester, CT clubs:
| reply to plk Re: [spammer hunt] Hotmail spam all has MX as part
Have you checked to make sure that MX is part of the domain of legitimate e-mail as well?
For instance, here is a "Received" line from one of my pieces of legitimate e-mail:
from imo-d06.mx.aol.com (imo-d06.mx.aol.com [205.188.157.38]) by flpvm23.prodigy.net (8.12.10 083104/8.12.10) with ESMTP id j3TL7hLn028371 for ; Fri, 29 Apr 2005 14:07:47 -0700
If I recall correctly, "MX" refers to a mail server.
If even legitimate e-mail contains "MX" then obviously you cannot use this string to filter for spam. |