On Fri, 16 Dec 2016 22:41:49 +0100 Marcus Schopen wrote:
> The problem is, that smtp-out.myoffice.de is also a submission server > for dialup clients. Headers from to to down: > > Received: from smtp-out.myoffice.de by MY_SERVER_IP > Received: from dialup-client-IP by smtp-out.myoffice.de SpamAssassin usually deals with this problem by looking for authentication in the header, but that's not recorded here. I think your best option is to leave it in internal_networks and write a custom rule to take some points off when it's submission.