Linda Walsh skrev: > The full list of SA hits? -- for that message, that was it, here's another > passed. Note, there is a weird header "X-SA-Do-Not-Rej: Yes" which doesn't > look normal:
X-SA-Do-Not-Rej is an internal header used between the Exim MTA and the SA-Exim plugin for said MTA, commonly used to disable the SMTP-time rejection otherwise applied to messages with sufficiently high scores. It should obviously be removed from all incoming messages, but some admins might miss that so the spammers see their chance. If you don't use SA-Exim, or Exim for that matter, or use another header name or use ACL variables instead, you can as well add a rule to give messages containing that header some points. Beware however that legitimate mail could contain it as well, if some admin has forgotten to remove it from outgoing mail. -- Magnus Holmgren [EMAIL PROTECTED]