[Mimedefang] spam spoofing myself

[Keith Patton]

I've been trying to stop this with no luck.

I am checking for my domain in $sender in filter_sender but apparently 
either I'm looking in the wrong place or have a code issue.

I'm looking for someone to point me in a good direction as I seem to be 
hitting a wall.


As you see from this example  the from looks like one of my addresses 
however it is not.

thanks

Keith


example:

 
Subject:
She will love it if your rock hard again with via...
From:
"Seth Murray" <corpnet at photronics.com>
Date:
Fri, 4 Feb 2005 10:47:25 -0600
To:
<corpnet at photronics.com>
Return-Path:
<corpnet at photronics.com>
Received:
from taboo.photronics.com ([192.129.97.7]) by 
crockett.dallas.photronics.com (Netscape Messaging Server 4.15) with 
ESMTP id IBEB7T00.1VX for <kpatton at dallas.photronics.com>; Fri, 4 Feb 
2005 10:31:05 -0600
Received:
from brady-xvyg5dh7g (adsl-1-125-43.bna.bellsouth.net [65.1.125.43]) by 
taboo.photronics.com (8.13.1/8.13.1) with SMTP id j14GUmAl011957 for 
<corpnet at photronics.com>; Fri, 4 Feb 2005 16:30:58 GMT
Received:
from brady-xvyg5dh7g [192.168.1.18] by photronics.com with SMTP; Fri, 4 
Feb 2005 10:47:25 -0600
Message-ID:
<059401c50ad9$2295ff26$0a69edb7 at brady-xvyg5dh7g>
MIME-Version:
1.0
Content-Type:
multipart/alternative; boundary="----=_NextPart_463_F5013141.BABCEBFF"
X-Priority:
2
X-Mailer:
Unknown (1.21)
X-SpamAssassin-Version:
3.01
X-Spam-Score:
-81.425 () 
HTML_IMAGE_ONLY_20,HTML_MESSAGE,INFO_TLD,MSGID_DOLLARS,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL,USER_IN_WHITELIST
X-Scanned-By:
MIMEDefang 2.48 on 192.129.97.7