Vicki Brown writes: >The mail from which this set of headers was clipped should have had a spam >score of 8.333; instead it has a score of -6.3. The only thing I see that can >account for the lower score is AWL which is not a "rule" for which a simple >"score" can be modified.
The AWL in this case, works on the From addr and the top 2 octets of the sending IP (or at least the very earliest IP in the Received lines). This is intended to make it a lot harder for spammers to simply send spam From and To the same addr and get an AWL bonus that way. Could the spammer have added a forged Received line containing your IP address? What do the Received lines look like? That'd be interesting, it hasn't happened yet as far as I know. --j. ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
