> From: Andreas Ntaflos [mailto:[EMAIL PROTECTED] > To spamassassin this spam appears to come from myself. It scored a low > AWL but > over 16 points all in all so the next message received from > [EMAIL PROTECTED] would certainly get high AWL score. > > My questions are these: did I get this right? Is that really what seems > to be > happening? If so, how do I handle such a scenario? When it is so easy > to > forge header fields does it even make sense to have an AWL that assigns > scores based on where the mail *appears* to be coming from?
The AWL classifies its history by both return address and IP. It sounds like in your case it is using the wrong IP, which may indicate problems with your trust path. Please see http://wiki.apache.org/spamassassin/TrustPath
