> Because some Webmail providers don't use a proper Received: header for > the initial hop, but add an X-Originating-IP: header instead.
Two things that bother me about that reply. First, SA *should* know about the major filtering providers (Bigfish, Postini etc.) and be able to deal with them accordingly. Second, X-Originating-IP, as in the IP address of the end-user terminal that's logged into webmail ? What's the point of parsing that ?
