We have a couple sendmail servers that I have not had time to replace with other mail packages. I have tried tightening anti-spam procedures as much as I know, but how do you find information on getting rid of the ability for spammers to use "Undisclosed.Recipients@mail.domain.com"?