Thank you for the reply.
> No, ALL_TRUSTED means that the email only passed through trusted
> IP addresses or was authenticated into the trusted network.
Yes. Sorry, I phrased it badly.
My main point here was the TVD tags. Why sometimes and not others in
virtually identical emails with no bodies? There is sufficient leeway on
the scoring that it does not really matter but it's still incorrect as
far as I can tell.
> In webmail the client IP address is often put in X-Originating-IP;
> SpamAssassin treats this as the first relay just as if it were from an
> smtp submission received header.
Hmm. I suspected as much. Thanks. :)
--
Dave Stiles
