Was there a change recently to the spamassassin code for SPF? Lately, any messages that come in via secondary MX's are failing, this nevefr used to be the case
Most common is facebook, lately they are marked as complete fail did someone break something? I assumed it used trusted networks or such to know, but its not. (we also run spf milters on MTA so hard fail would not normally get to spamassassin so not sure how long this gone on for) (yes - they ARE from facebookmail before anyone asks)