On Fri, 06 Jan 2012 22:12:09 +1300 Jason Haar wrote: > Hi Henrik > > I tried that - didn't make a difference. > > In debug mode, it certainly made the IP address show up against > X-Spam-Relays-External - but no RBL lookups against it occurred? That > conflicts with the man page: "These IP addresses are virtually > appended into the Received: chain, so they are used in RBL checks > where appropriate." > > If I change the last Received header to contain that IP address, I > get a totally different score than when I rely on > originating_ip_headers. I think the problem is these other headers > are added to the *end* of the X-Spam-Relays* variables instead of the > beginning?
Most RBLs only run against the the last external IP address. Deeper checks caused a high FP rate because of dynamic IPs being reassigned, it doesn't matter for the last external since, since dynamic addresses delivering to mx are overwhelmingly from botnets.
