Sherman Lilly wrote:
I have spam getting through that would get filtered if they were not getting -100 because of the USER_IN_WHITELIST rule. I do have a whitelist but no of these spam email have anything close to my whitelist.
Yes they do, otherwise you wouldn't see USER_IN_WHITELIST hitting.It's probably hitting on whatever the envelope from address is (found in the Return-Path header). Most of the time this happens when people whitelist their own domain using whitelist_from.
Daryl