Dave Barnett <as10@xxxxxxxxxxxxxxxxx> wrote: > Many spams have a fake 'To:' Absolutely. > and/or 'Envelope-To:' header Eh, no - how can these be faked? The Envelope-To: value is inserted by your ISP to tell you specifically who the mail was sent to. Unless you think your ISP is lying to you, it's the only one of the "To:", "CC:", "BCC:" etc headers you can actually believe in. -- Jeremy Nicoll - my opinions are my own