On Thu, 31 Dec 2015 09:16:03 -0500 Kevin A. McGrail wrote: > On 12/30/2015 7:26 PM, Noel Butler wrote: > > > > If so, I think I see the problem, SA is using -ANY in its lookup, > > not the A that you want (I'm guessing without looking into code, > > I'm just back from holidays so bit busy at home), postfix ns4 has > > an IP in a /24 list from HOSTI-20 173.244.206.0/24 which was added > > 4 weeks ago by looks of it, its marked "spam multiple junk domains" > > > > So it seems SA's eval code does have an error. > So the rule specifies A but the code is firing with ANY, is that what > you are saying? Do you have any debug output by chance?
Sounds similar to this: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7242