web client is acting as a "trusted proxy" that isn't being used by spammers from a VPN IP address farm?