Re: Question about SPAM headers

From: Arnoud (galactus@stack.nl)
Date: Mon, 06 Oct 1997 18:27:48 +0200

In article <Ge/N0krq47tZ089yn@clic.net>,
kelias@clic.net (Robert Keith Elias) wrote:
> I have noticed that almost all SPAM headers have the "From:"
> header ahead of a couple of "Received:" headers. A recent
> example is shown below.

This may be because the spammers forge the other "Received" headers
when they send out the message, so that it looks as if it comes
from another server. It may also simply be because the mail server
that generated the Received header directly _below_ the From line
likes to re-arrange headers.

-- 
E-mail: galactus@stack.nl      | PGP encrypt if you can (Key ID 0x416A1A35)
http://www.stack.nl/~galactus/ | To find out more about PGP, send mail 
                               | with HELP PGP in the SUBJECT line to me.