Benny Pedersen wrote:
does users us smtp auth ?
Not the OP, but he *did* say this is from webmail. Presumably it's a little hard to send mail from his webmail setup unless you're logged in...
(IIRC SA includes rules to look for Horde/IMP and Squirrelmail [at least] Received: headers and considers them properly for the trust path.)
-kgd