Hi, This weekend we're seeing a lot of FPs on this specific corpus (ham-net-bernie-mix).
Judging from the logs, my guess is that they are all from the same source IPs/networks (maybe a free mail hosting). It would be very interesting to know which IP addresses refer to those false positives, so that we can check why are they being miss labeled as "bad reputation" when apparently they are somewhat trusted sources (most of them also hit DNSWL). Any chance that someone @spamassassin (or the corpus owner) would be kind enough to help us troubleshoot this? Thanks in advance! -- João Gouveia
