Jeff Chan wrote to 'SURBL Discussion list':
On Thursday, August 12, 2004, 4:26:09 PM, Jeff Chan wrote:
Headers are too easily and too often forged. .... there's an incentive to put legitimate domains in headers to try to fool automated or human header checking.
Correction, none of the domains in SURBLs should be legitimate so they should not have value in being added to headers. Still SURBLs are best used on URIs only.
Yes, and your earlier point is still valid, as headers would be an easy way to poison SURBL checks and make life a living hell for those who hand-check URIs.
- Ryan