from address based on site ID

• otherwise we can see ssl-id.com as the sender domain
• make sure the domain is always invalid by using the proper toplevel
(see RFC 2026)
filter messages about stuff that I did