Message from user inside www.pair.com: >>>>>>>>>> Original message <<<<<<<<<<<< Apparently Yahoo has slightly changed the routing of groups messages:
SA EvalTests.pm /from \[$IP_ADDRESS\] by \S+\.(?:groups|grp\.scd)\.yahoo\.com with NNFMP/ Received headers with NNFMP: from [66.218.69.1] by n22.bulk.scd.yahoo.com with NNFMP; 25 Nov from [66.218.66.30] by mailer1.bulk.scd.yahoo.com with NNFMP; 25 (qmail 52933 invoked from [66.218.69.2] by n3.bulk.scd.yahoo.com with NNFMP; 25 Nov from [66.218.67.163] by mailer2.bulk.scd.yahoo.com with NNFMP; 25 (qmail 18949 invoked from [66.218.69.3] by n8.bulk.scd.yahoo.com with NNFMP; 25 Nov from [66.218.67.164] by mailer3.bulk.scd.yahoo.com with NNFMP; 25 The server names in the header lines with NNFMP now use bulk.scd instead of group.scd, therefore they no longer match. Proposed fix: /from \[$IP_ADDRESS\] by \S+\.(?:groups|(grp|bulk)\.scd)\.yahoo\.com with NNFMP/ I have filed a bug report at http://bugzilla.spamassassin.org/show_bug.cgi?id=4005