>>>>> "TM" == Terry Milnes <[EMAIL PROTECTED]> writes:
TM> Ryan, TM> Ok here are the two headers again, both messages originated from the TM> same computer, smtp server in outlook express is set up to use TM> aloak.ca (which is not in a dialup block). TM> The only difference besides content is the recipient address, the only TM> difference in content was they also contained recipient addresses... TM> I ran this a dozen times to make sure it wasn't an isolated case, and TM> was incluing the recipient address in the content for fater reference. No, the difference is that there are extra Received: headers on the message that went to aloak.ca. This apparently pushed down the dynamic IP received header low enough that SA doesn't look at it. Try this: take the message that was not flagged and save it headers and all to a text file. Now run that thru spamassassin -t. Now, remove one "Received" header at a time from the top and run it thru again. Repeat until it flags your message with dynablock. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Vivek Khera, Ph.D. Khera Communications, Inc. Internet: [EMAIL PROTECTED] Rockville, MD +1-240-453-8497 AIM: vivekkhera Y!: vivek_khera http://www.khera.org/~vivek/ ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk