These slimy B*%$^&ds are forging whitelist_from_rcvd

[Scott Blomquist]

Just in today. I only have Whitelist_from_rcvd entires in my local.cf.
This one hit on that rule. Damn...now what.
/header paste
Return-Path: <[EMAIL PROTECTED]>
Received: from 216.114.128.66 ([221.127.165.47])
	by babyblue-eth1.parkstpress.com (8.10.2/8.10.2) with SMTP id i69ACHo02440;
	Fri, 9 Jul 2004 06:12:17 -0400
X-Message-Info: 311I1VCl443hDzX704RUW0iDAFjvH8
Received: from [EMAIL PROTECTED] 
([208.236.71.0]) by [EMAIL PROTECTED] with Microsoft 
SMTPSVC(5.0.3550.1784);
	 Sat, 10 Jul 2004 09:08:40 -0100
Message-ID: <[EMAIL PROTECTED]@parkstpress.com>
X-Originating-IP: [81.250.232.92]
X-Originating-Email: [EMAIL PROTECTED]
X-Sender: [EMAIL PROTECTED]
Reply-To: "Clara Call" <[EMAIL PROTECTED]>
From: "Clara Call" <[EMAIL PROTECTED]>
To: "Dawn" <[EMAIL PROTECTED]>
Subject: Hi MYUSER
Date: Sat, 10 Jul 2004 07:12:40 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--289992752399318"
X-Spam-Status: No, hits=-83.3 required=5.0
	tests=BAYES_90,DRUGS_ANXIETY,DRUGS_ANXIETY_OBFU,DRUGS_DEPRESSION,
	      DRUGS_DIET,DRUGS_DIET_PAIN,DRUGS_MANYKINDS,DRUGS_MUSCLE,
	      DRUGS_PAIN,DRUGS_PAIN_OBFU,J_CHICKENPOX_13,J_CHICKENPOX_24,
	      J_CHICKENPOX_26,SARE_BOUNDARY_07,SARE_HEAD_SPAM,
	      SARE_MSGID_CHAR_2AT,SARE_RECV_IP_221124,SARE_RECV_SUSP_3,
	      USER_IN_WHITELIST
	version=2.53
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp)
--
    Scott V. Blomquist,A-SA-CN-NRK    TINLC(tm)  #2598
          ITI/Bear&Co    Rochester, VT
    802-767-3174(v)           802-767-3726(f)
"Any technology sufficiently advanced is indistinguishable from Magic."
                                                 A. C. Clarke