Stephen Gran wrote:
> My point is that often there is absolutely no correlation between
> sending IP address and MX information
I agree that this is often, even usually, the case. My theory is that in
the case of *legitimate* e-mail coming from hosts with generic or
missing rDNS there is a significant correlation between the sending host
and the host(s) listed as MX(es) for the senders domain. This theory is
based on observations at $WORKPLACE dealing with such matters.
Bob