Maybe it's already built in and someone can show me how to implement it, but could we add a list feature that we resolve domain names and see if the IP is blacklisted -- from the message body -- not from the incoming mail?

For example, one of our addresses receives several hard core porn emails daily. A line from one of the emails could read:

If we try to block the domain, the next email that comes in has a different domain, but they all resolve to the same IP. Is this realistic?

Thanks,

- Al

That's the trick. Nothing in the email contains the IP. The email contains a dns name that references the ip, and the dns name changes in every email. Pretty slick really.

I've blacklisted the IP in our proxy software, so at least the images don't show up in Outlook, but the message is still there.

- Al