I keep looking for a way for customers to report missed spam without an admin having to sift the headers of many messges per day.

We've always been hesitant to implement similar features, as they are likely to open your systems to interference by hackers.

Our SFDB reporting system employs 3DES encryption to post spammer IP data to our webserver. As hackers/spammers don't have access to the private encryption key, creating bogus reports is very very hard makign the system pretty safe.

If we implement headers/footers in emails that are used to report back information to your webservers, this information would be in clear-text, not encrypted. A hacker/spammer could then very easily inject bogus data into your back-end database to alter its contents. To be safe, SpamFilter would have to encrypt the header/footer, and your code on the webserver would need to then decrypt the data in order to update your database. this can most certainly be done, but would require quite a bit more steps to implement, the major difficulty being to have both SpamFilter and your webserver use *exactly* the same kind of encryption methods and keys. As some webservers use ASP, others .NET, and others PHP this creates some hurdles in finding a common library. We ourselves ended up writing our own encryption DLL to be used on our IIS server to render the encryption between SpamFilter and our IIS servers compatible when receving encrypted SFDB data.