> Received: from dfw-ix9.ix.netcom.com (dfw-ix9.ix.netcom.com
[206.214.98.9])
> for mrin60.mail.aol.com (8.8.5/8.8.5/AOL-4.0.0) with ESMTP id
LAA14140;
> by mail.earthlink.net (ip159.hackensack3.nj.pub-ip.psi.net
[38.26.49.159])
> by relay1.smtp.psi.net (relay1.smtp.psi.net [38.8.14.2]) (8.8.5/8.6.5)
> with SMTP id GAA04056
> for <smartinvestors(_at_)newsletter(_dot_)com>; Tue, 09 Dec 1997
07:25:38 -0600 (EST)
If I detect "by" as a _whole_word_ more than once in a header,
is there any possibility it's "broken" rather than forged?