russell jones yqzwyueggycrewcom ran spamassassin message biggest thing made take hit almost 3 points took score bayes db 1 probability supposedly says learned spam 500 messages ham 5000 maybe put autolearnenabled domain since added several blacklists add points fairly fast would marked spam guess user got guinea pig domain email added lists matt wrote doesnt make sense maybe misunderstanding openspforg spf actually suppose spammer forges hotmailcom address tries spam connect somewhere hotmail message sent see mail dont take word ask hotmail ip address comes network mta never really sees whats headers adds headers smtp connection first begins connecting mta says helo rywckyozhrvsuchnsuchdomaincom thats spf looks mta adds return path headers returnpath return path looks flaky would think spamassassin would way since valid domain consider suspect sure though matt thu 07 aug 2008 215909 0600 fwd spf_fail flag