One last update and I'll shut up for a bit. I've updated my server to make my Received headers look literally like this:
Received: from [132.177.124.246] (doombox.iol.unh.edu [132.177.124.246]) (user=mikecrelay mech=PLAIN bits=0) blah by postal.iol.unh.edu (8.14.0/8.14.0) with ESMTP id l5KFveCk000817 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <[EMAIL PROTECTED]>; Wed, 20 Jun 2007 11:57:40 -0400 And i told spamassassin to match: header BLAH Received =~ /blah/ score BLAH -800.0 And it's not picking it up. So I really have no idea what the pattern is. thanks -- View this message in context: http://www.nabble.com/a-rule-to-allow-authenticated-users-stopped-working%2C-unless-run-at-user-level-tf3952490.html#a11216588 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.