[you can't bounce spam back to it's source]

Why not? Because spammers _invariably_ forge the return addresses to keep exactly that from happening.

What I do is look into the headers, and start bouncing it back to the domain administrator, if I can't find any better mail address. Pegasus makes it easy to automate this. I *do* send one politely worded request first - it takes a second spamming before I'll set up the rule. Peter Trei trei@process.com