Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there spam filtering technologies that examine email headers?

For example; X-PHP-Origin header can contain an IP address that is on a blacklist; are there spam filters that would catch this?

I thought spam filters only checked the connecting client?

share|improve this question
do you have an example header? I don't think I've ever seen that specific header. Do you mean the PHP originating script header? There's an X-originating-IP header. Can you provide example? – TheCleaner Jan 4 '13 at 18:34
up vote 2 down vote accepted

Well, SpamAssassin for one.

Here's a list of the checks it performs:

The list notes the "area" of the email that are tested, e.g., body, header, etc.

Glancing through the list, it's entirely possible that SpamAssassin will not catch a blacklisted IP address used in your non-standard X-PHP-Origin header, as the header tests tend to look at specific header lines, and your referenced header probably won't be one of those.

share|improve this answer

As far as I know most of them actually do.

This is actually a very basic way of filtering spam, looking at the header and compare the senders IP to black lists such as spamhaus's SBL list.

share|improve this answer
I thought spam filters only checked the connecting client? – jersten Jan 4 '13 at 18:28
Spam filters check lots of things. Headers, body content, IP reputation of sender, quantity of recipients...spam filtering is made up of many layers that, stacked together, will hopefully drop spams. – Alex Jan 4 '13 at 18:42

There are blacklists out there that use the mail headers to deny email.

In sendmail, there are many different tools available that you can configure for spam control as well.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.