Lincoln Yeoh <lyeoh@pop.jaring.my> writes:
> Thing is, in my case it wasn't due to that many people, most were
> mainly from one guy at rr.com
>
> Common header:
>
> Received: from LANCE (cs6711150-130.satx.rr.com [67.11.150.130])
^^^^^
You should filter on this string (which MUST contain a dot according
to RFC 2821). You can do this by rejecting HELO/EHLO commands which
lack a ".". Be sure to activate this filter only for mail received
from the Internet; your local Windows clients might generate it, too.