Your network environment includes Microsoft Exchange Server 2010. You detect that a spam attack has occurred. You need to prevent further spread of messages based on IP addresses repeated in email headers. Which type of filter should you use?

A.
file

B.
keyword

C.
connection

D.
sender-domain