info about spam messages

[Tom Anderson]

From: "Tayfun ASKER" <tasker at metu.edu.tr>
>   "From" line is of course very easy to spoof. But, for example, we
> receive lots of spam with From address big at boss.com. I think there is no
> harm to filter these spams using just the spoofed From info.

As long as you don't automatically filter all From addresses in the log.
Some random spammer or virus just might send you a 1.000000 spamicity
message From: your_best_friend at their_isp.com.  You would have to manually go
through the list and decide each case independently.

Tom