yeah, RW pretty much hit this one on the head. You're going to need to exempt it by IP, not by domain name.
On Thu, Nov 5, 2009 at 19:56, RW <rwmailli...@googlemail.com> wrote: > On Fri, 6 Nov 2009 03:28:40 +0000 > RW <rwmailli...@googlemail.com> wrote: > > >> The mail.nisdtx.org in the headers is >> just a helo, so there's no real evidence for nisdtx.org anywhere in >> the headers. The plugin could do its own A-record lookup on >> mail.nisdtx.org and verify it against the IP address, but I guess it >> doesn't. >> > > Actually even if it does, there's a mismatch > > Received: from mail.nisdtx.org (unknown [70.129.99.5]) > > > dig +short mail.nisdtx.org > 70.129.99.3 >
