The From field can be faked. Normally for me I open up the mail in Outlook click on "View" and go to "Options" to look at the email envelope. You should see which smtp server that is sending these junk. For me I just block the domain from the smtp address. Not foolproof, one time I actually block a ISP in UK.. Ha Ha .. and my user scream at me because her brother is using that ISP... -----Original Message----- From: Jeffrey Robillard [mailto:jrobill@xxxxxxxxxxxxx] Sent: Wednesday, November 13, 2002 10:08 PM To: [ExchangeList] Subject: [exchangelist] Filtering http://www.MSExchange.org/ We use the built in exchange filtering quite heavily to block the tons of garbage email we get. Adding 5-10 new filters every day is a pain, but its worth it in the long run. yesterday I received a new group of junk mails from a source labeled as.. [%%email.addr%%] How do I add this kind of completely invalid email address to the filter list... and isn't exchange supposed to weed this invalid garbage out anyway? There is no @ sign in the address so I have no idea how to label it in the filter list. Thanks ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: lbong@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')