Equals sign in email address. Is this some kind of spammer trick, or legitmate?

[jols]

Lately I've been seeing more and more From addresses hitting the server looking something like this:

[email protected]

The "ourcustomer.com" part was changed, but typically even though this is a FROM email address, our customer's domain is there between the = sign and the @ sign.

My question is, do legitimate e-list systems use this kind of addressing, or could I just set up a rule to block any such email with a From address in this form, i.e. when the FROM address includes an equals sign?

So far I've only seen spam mail with this kind of a From address.

 

[danrussell]

Hello ,

You should check the Header and body of the emails you receive with the "[email protected]". If you think its junk, then you can block the sender email address. Else confirm with the your customer that if he has configured or subscribed to any system which sends email using his domain name.

Thanks.

 

[cPanelMichael]

Hello

You risk blocking legitimate email, so it might be a better idea to implement an alternate SPAM filtering technique instead. There are several options available in "WHM Home » Service Configuration » Exim Configuration Manager" that you might find beneficial (e.g. RBL options).

Thank you.