I'm getting a few false positives and noticed that a common factor seems to be that the first component is "rtn" . The lists appear to be legit but they are getting picked up for NO_MX_FOR_FROM , FROM_AND_TO_SAME, COPYRIGHT_CLAIMED,CTYPE_JUST_HTML and the like.
Looks like a few music companies are using this service which appears to be run by emazing.com for their band's mailing lists. Here are some Froms I grepped, more details on request. From: Daily Dish <[EMAIL PROTECTED]> From: Destiny's Child <[EMAIL PROTECTED]> From: EMAZING <[EMAIL PROTECTED]> From: Maxwell <[EMAIL PROTECTED]> From: Miles Davis News <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music <[EMAIL PROTECTED]> From: Sony Music Pop <[EMAIL PROTECTED]> From: Sony Music Wiretap Weekly <[EMAIL PROTECTED]> From: System of a Down <[EMAIL PROTECTED]> I'll see if I can contact them when I get home about getting full MX records for the addresses they are using. -- Simon Lyall. | Newsmaster | Work: [EMAIL PROTECTED] Senior Network/System Admin | Postmaster | Home: [EMAIL PROTECTED] ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk