Scott: Here's a partial header from a message and it shows clearly that the spam test failed was IPNOTINMX
X-Declude-Spoolname: D809c2823013c78d3.SMD X-Note: This E-mail was sent from tandem.alberni.net ([64.141.6.11]). X-Note: This E-mail was scanned for spam by Declude JunkMail. X-Spam-Tests-Failed: IPNOTINMX [-3] Here is the associated log output for that message and it shows a different test as failed: Q809c2823013c78d3 nNOLEGITCONTENT:-3 . Total weight = -3 How come? Erik --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.