From: "John Hardin" <jhar...@impsec.org>
...so what rules *are* they hitting?
Hello John, I have pasted a recent issue on pastebin: http://pastebin.com/74aAZPw9 , score 0.5 Its origin is unfortunately in the US, not Africa. But if I change Received: from [173.245.64.9] by web5718.biz.mail.ne1.yahoo.com via HTTP with Received: from [41.245.64.9] by web5718.biz.mail.ne1.yahoo.com via HTTP it does not change anything in the scoring. I am unsure that the file 72_active.cf tries to match the specific Yahoo header. Regards Frédéric