SPF_HELO_PASS,
This might well be a negative scoring rule. Spam usually shouldn't be able to get an SPF_PASS rating.
It can easily get one if it's sent *from the spammer's own domain* and they set up SPF records for it.
Remember, SPF and Domain Keys are *anti-forgery* technologies, not anti-spam technologies. (Matt Kettler made a couple of good posts on this subject yesterday in the "I like this one.... Particularly the BS from Yahoo....." thread.) It's just that detecting forgeries is also useful in detecting spam -- and figuring out where to complain.
-- Kelson Vibber SpeedGate Communications <www.speed.net>
