Hi, Should the __KAM_MX rules be so general to catch a domain that just contains .info in it, instead of being from the .info domain?
Jun 4 22:51:39.542 [24295] dbg: rules: ran header rule __KAM_MX5 ======> got hit: "smtp4.infomaniak.ch (smtp4.info" This alone resulted in 2.0 points, creating an FP for me: meta KAM_MX4 (__KAM_MX5) score KAM_MX4 2.0 describe KAM_MX4 MX Record and dot info domains associated with FAKERBL Spammers Thanks, Alex
