James Lay wrote: > Here's the rule: > > body GATEWAY_001 /tripod\.com/i > score 5 > describe match tripod.com > > Here's the result: > > Nov 9 13:42:03 gateway spamd[17880]: spamd: result: . -2 > -ALL_TRUSTED,AWL,BAYES_00,GATEWAY_001 > scantime=0.6,size=1213,user=spamfilter,uid=1004,required_score=3.4,rhost=localhost,raddr=127.0.0.1,rport=/var/spool/spamfilter/spamd,mid=<[EMAIL > PROTECTED]>,bayes=0,autolearn=ham >
By the way.. if that message was an outside email, ie: not sent by and traveling only through trusted hosts, you should fix your trusted_networks declaration. ALL_TRUSTED should never match outside email.
