On Thu, May 17, 2007 09:00, fRANz wrote: >> From the FVGT ruleset (Fred): >> header FH_HOST_EQ_D_D_D_D X-Spam-Relays-Untrusted =~ /^[^\]]+ >> rdns=[^ ]+\d{1,3}[^0-9]\d{1,3}[^0-9]\d{1,3}[^0-9]\d{1,3}[^ ]+ / describe >> FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d >> score FH_HOST_EQ_D_D_D_D 0.665 > > Yep, 'Host starts with d-d-d-d' is also in wiki description too, I see > it... > > Below a session header positive to FH_HOST_EQ_D_D_D_D test. > Which is FH_HOST_EQ_D_D_D_D host in these headers?
X-Spam-Relays-Untrusted is a SA internal variable. Run the message through in debug mode and you can see what it thinks.