I've located what this is attack is called "Joe-Job" and I'm trying to figure out how to accept from=<> then discard it at the MTA. Does anyone have a sendmail.cf config rule that shows how to do this. Thanks in advance Steve