On Tue, 4 Jun 2019 18:10:51 +0300 Savvas Karagiannidis wrote: > Hi, > > my guess is that for some reason an empty line is inserted in the > email somewhere above the headers and before the message is processed > by spamassassin. This will cause all headers below this empty line to > be treated as the actual body of the message, so all missing header > tests will hit and will result in what you actually see.
But as has already been pointed out it has the combination of MISSING_FROM and HK_RANDOM_FROM, and the latter is based on a From:addr test.
