On Fri, Jun 26, 2015, at 02:01 PM, RW wrote: > The received headers are parsed top to bottom; once an untrusted server > is identified the chain of trust is broken and nothing below that can > be trusted. Spammers can and do forge headers.
Got it. Which leads back to the question you raised ... why is that 66.111.4.29, in 66.111.4.0/24, not trusted?