Jerome Mainka wrote:
The sender and the recipient belong together to the same provider, and the
final server of the received path is not the host on which SA is run.
Which server is scanning the mail?
You'll have a better chance of getting a solution if you attach the
*complete* headers, including SpamAssassin markup, to an email to the list.
Also make note of which host is scanning the mail if it's hostname
differs between the one seen in SA headers and the one in the received
headers.
Further, why is it that you trusted the sending-users ISP's submission
server? Do you also RECEIVE mail from this same server (ie. it's one of
your MXes).
Daryl