216.9.248.49 is listed in SpamCop, since at least 5am PST. See:
http://www.spamcop.net/w3m?action=blcheck&ip=216.9.248.49 I would guess because of bounced viruses (e.g. the latest round of Bagle that started last night). The page above notes that a neighbouring IP (from which I have received good mail) has had a SpamCop listing previously (but not currently). I recommend: REMOTEIP -20 CIDR 216.9.240.0/20 Or some similar weight in one of your Declude JunkMail Pro filter files. Andrew 8) --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.