I'm an idiot, that was an incomplete post.
Here's an example to show what I mean.
Am I whitelisting wrong? Or should this not trigger this kind of whitelist?
Is this something fixed in 3.0?
Ahh.. Ok, makes sense now with the headers. I can't help you here since my version of SA runs for me, myself and I, so my configuration expertise is minimal, however you'd never want to whitelist an 'address'. Whitelist based on an IP, or some other method that can't be 'forged'. I'm sure someone else can give you the specifics, but you want to whitelist mail somehow locally, i.e. if I send you a message that claims to be from a local address (i.e. [EMAIL PROTECTED]), it may still get marked as spam, however if I'm on your network and send a message, it gets a much lower score.
