Hello, looks like FSL_HELO_NON_FQDN_1 and HELO_NO_DOMAIN are overlapping most of the time:
header FSL_HELO_NON_FQDN_1 X-Spam-Relays-External =~ /^[^\]]+ helo=[a-zA-Z0-9-_]+ /i header __HELO_NO_DOMAIN X-Spam-Relays-External =~ /^[^\]]+ helo=[^\.]+ / which is in fact the same, and the: meta HELO_NO_DOMAIN __HELO_NO_DOMAIN && !HELO_LOCALHOST only has exclusion for "localhost" name (which has its own rule) the scores could be united too: score FSL_HELO_NON_FQDN_1 2.361 0.001 1.783 0.001 score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "They say when you play that M$ CD backward you can hear satanic messages." "That's nothing. If you play it forward it will install Windows."