How do I block a domain from the recieved portion of headers

[Brandon Hoppe]

A virus on a users machine from an outside domain keeps sending email to a
user on my domain. MailScanner is detecting the virus and removing it. But
the problem is that I get these emails atleast once an hour. It always comes
from the same place. It disguises itself as though the email comes from my
domain, but the full headers shows it comes from another domain. For
example:

 

 

Full headers are:
 
 Return-Path: <g>
 Received: from test-domain.com (cpe-24-170-49-168.stx.res.rr.com 
[24.170.49.168])

 

 

My domain is named test-domain.com. I am not on RoadRunner so the rr.com
address above is where its originating from. 

 

What’s the best way to go about blocking this domain or sub-domain so that I
stop receiving the notices of detected virus emails from MailScanner. 

 

Thanks.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060321/5b698278/attachment.html