Sorry yes, penny drop now.. Jonathan
> On 26 Nov 2020, at 15:06, RW <rwmailli...@googlemail.com> wrote: > > On Thu, 26 Nov 2020 10:39:29 +0000 > Jonathan Gilpin wrote: > >> The header: x-originating-ip: [86.129.191.88] >> >> is being put in by office 365.. it is already in when our exim >> (FreeBSD Port Exim-sa-exim) receives the mail from Office 365.. >> >> IS there a way to make SpamAssassin ignore this x- header? > > You don't need to, read my reply. The FP was caused by two incorrectly > set-up custom rules. These rules should simply be removed.