On Fri, 7 Jun 2019 17:00:00 +0100 Niamh Holding wrote: > Hello RW, > > Friday, June 7, 2019, 4:43:13 PM, you wrote: > > R> This provides the first section of X-Spam-Relays-Untrusted. > > And there is no other received header with that IP address, so where > is the second entry coming from?
This is the reason: > X-Originating-IP: 162.208.32.167 Perhaps the rule should be modified to test for by=\S