Adam Katz wrote: > This rule is poorly written as it does not limit its examination to > the last external relay. Were SARE accepting revisions (and assuming > I've read the intent right), it should be reworked so as to be defined > as (be wary of mail agent rewrapping): > > header SARE_RECV_SPAM_DOMN0b X-Spam-Relays-External =~ /&[^\]]+ > rdns=[^ ]{0,25}\bdynamic.hinet\.(?:com|net|org|info)(?:\.tw)? /
Also be wary of typos. Let's try this instead: header SARE_RECV_SPAM_DOMN0b X-Spam-Relays-External =~ /^[^\]]+ rdns=[^ ]{0,25}\bdynamic.hinet\.(?:com|net|org|info)(?:\.tw)? / There should be one space before "rdns=" that probably wraps in the email.