Hi
I use the SARE rules and have been asked to explain why a certain email got caught as spam. I'm having trouble with this rule SARE_RECV_IP_218078 70_sare_header1.cf:header SARE_RECV_IP_218078 Received =~ /\[218\.(?:7[89]|8[0123])\.\d{1,3}\.\d{1,3}\]/ 70_sare_header1.cf:describe SARE_RECV_IP_218078 Passed through possible spammer relay or source I can see why its hit as the relay was 218.78.208.145 - however does anyone know what's wrong with this address? I couldn't find any info as to why mail from 218.7.. is considered dodgy (except it's from china)? Thanks for any help Paul