>127.0.0.1 is not remote host :/ >did you send it for testing ?
Nope. This was a real, live message from the outside world. >make sure that exim do send remote ip to sa, else it will work badly, also that exim does not accept and bounce, i have seen it, if its spam then reject I'm pretty sure our setup has been working almost perfectly for years. Very few false-positives. We run about 40 filters in exim (smtp time) before a message even gets to SpamAssassin, and if the score is too high (over 15) we accept and quarantine it. Otherwise, we accept and deliver it to the recipient, which is already guaranteed to be a legitimate account on our system (as determined by an earlier LDAP lookup). - jim -