Adam Katz wrote: > header SARE_RECV_SPAM_DOMN0B X-Spam-Relays-External =~ > /^[^\]]+ rdns=[^ ]{0,25}\bdynamic.hinet\.net /
Minor bugfix that doesn't affect my findings: That second range should have prohibited both space and right-square-bracket. Because there is more than 25 characters of buffer before the next entry, this shouldn't matter, but here's the corrected version just to be safe: header SARE_RECV_SPAM_DOMN0B X-Spam-Relays-External =~ /^[^\]]+ rdns=[^\] ]{0,25}\bdynamic.hinet\.net / I'll leave the corrected version in my sandbox for a little longer so as to double-check my fix, but I'm done sending emails on this topic unless there's another problem. Take it or leave it.