Udi remembered reading somewhere that spammers sometimes put Received: headers
onto a message out of the usual sequence (which is to add them at the top, so
that as you read through the headers of a message you'll see the Received:'s
from most recent through to the oldest). Well, spammers do falsify Received:
headers, telling lies about what system accepted the message from what other
system and when it happened. But the topmost Received: is going to be the one
put there by your own ISP or your own box, and it won't be affected by the
practices of spamhauses, so if you don't have a From_ line you can still use
the topmost Received: to determine the date and time when the message arrived,
even if some of the other Received: headers farther down may not be reliable
and may even show dates and times in the future.
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail