Hello Scott. While not an answer to your questions, I notice you are using SPFPASS. Please note that it is not uncommon for SPAMMERS to setup and use valid SPF records, meaning that you can very well be giving a negative weight to spam emails.
The real only effective use of SPF as a test is SPFFAIL, which requires failure of an ABSOLUTE SPF record. ;) -----Original Message----- From: "Scott Jibben" <[email protected]> Sent: Wednesday, November 12, 2014 3:57pm To: [email protected] Subject: [MBF] PRE-TESTED question Hello, I've noticed that some mail is getting routed to junk mail using the newer PRE-TESTED filter. MAILFROM 20 PCRE (?i:@([a-z0-9-_]{5,25}\.[a-z0-9]+(?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?) From: "WhenToWork.com" <[email protected]> X-Declude-Fail: SPFPASS [-1], PRE-TESTED [20], WEIGHT5 [5], WEIGHT7 [7], WEIGHT10 [10], WEIGHT14 [14], WEIGHT15 [15] This is legitimate email. I'm not a RegEx expert. Is it failing because the mail is coming in from a sub-domain in the email address? Is it failing because of the uppercase letters in the from email address? Some other reason? Thanks, Scott Jibben ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>
