Thanks John, that was exactly the feedback I was requesting. Yes, that is
my
MTA's header and I'll add the qualification you suggest. I was assuming
(oops, shouldn't do that) that "Received =~" meant the first, non-local
Recieved line. Evidently (from your comment about forgeries), SA uses ALL
received headers for these checks.
Yes it does if you do Received. If you have trusted_networks set up right
there is a pseudo-header that you can use that will be just the record you
want, I believe. Of course I can't remember the name of that header, but
I'm sure someone else does.
Loren
