I get TONS of spam from these .tw sites. At least the bogus headers have been forged and show some bogus .tw address. And the emails are usually always in Big-5 Chinese character set. I contacted our sys admins and they said they can't do anything to stop them :( Think how much of the Internet bandwidth is consumed by SPAM :( It is a big problem and I see no real effective solutions. Our email system is IMAP-4 (Cyrus) and using Pine as the mail client. Filtering has not yet been enabled so I can't block these addresses. How does one create an email with a bogus header? I looked at the header and it looked as if they had been using our mx*.andrew.cmu.edu servers to relay the spam yet the sys admins told me that anonymous relay is disabled on these servers. When someone forges the mail header is there ANY way to track down where it came from? I suppose in time international law will have to be worked out to address issues of fraudalent mail and Internet crimes in general. Zach uram@cmu.edu "Blessed are those who have not seen and yet have faith." - John 20:29 _______________________________________________ Firewalls mailing list Firewalls@lists.gnac.net http://lists.gnac.net/mailman/listinfo/firewalls