The last time I checked they seemed to only scan the "MAIL FROM:" i.e., the envelope addys. :-)

One can circumvent the VSNL filtering mechanism by using fake addys that look like anything@<vsnldomains> and use correct ones in the headers. But, the moment they start scanning the headers we will have to do direct delivery :-(

Fart