> If SMFilter adds its own headers, couldn't you just write a custom > rule for SA that gives any message with those headers a negative > score?
SMFilter doesn't add anything; SM does add an "authenticated" header. But rather than plunge Wayne into SA rules -- which are still the wrong place to bypass SA, and where he is clearly less comfortable -- I am encouraging a solution at his wrapper/caller layer that will both save considerable resources and possibly be more in his comfort zone. --Sandy