I don't have *any* hits on FORGED_EBAY_RCVD in my logs for the past two weeks. However, it looks like this expression in EvalTests.pm:
if($rcvd =~ /from.*\Q$domain\E.*[\[\(][0-9]+\.[0-9]+\.[0-9]+\.[0-9]+[\]\)].*by.*\Q$domain\E/) { might need a word-boundary delimiter before $domain: if($rcvd =~ /from.*\b\Q$domain\E.*[\[\(][0-9]+\.[0-9]+\.[0-9]+\.[0-9]+[\]\)].*by.*\b\Q$domain\E/) { Try that and see what happens. ------------------------------------------------------- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk