Detecting and filtering method of spam mail based on counterfeit sender

摘要: The invention relates to the technical field of Internet, and in particular discloses a detecting filtering method spam mail based on counterfeit sender. comprises following steps: starting monitoring system; receiving mail; extracting header; initializing sender email domain set S_DN; analyzing MD from From field; DN Received judging mail, namely if belongs S_DN, as does not belong normal mail. As is used, effectively detected filtered, so that prevented being filtered wrongly. Thus, support for network management, security on-line evidence obtainment provided.