After seeing all the SPF discussion lately I decided to actually ask you guys about this problem.
I have many whitelist_from_spf entries where I usually keep my whitelist entries. For some reason, I have never seen a hit on USER_IN_SPF_WHITELIST. I have received plenty of emails that I believe should have hit. Here are some example entries: whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] whitelist_from_spf [EMAIL PROTECTED] After further investigation I notice that I have plenty of SPF_HELO_* hits, but no SPF_* hits. I assume this issue is probably related to the other. What is the difference between SPF_HELO rules and the plain SPF versions? Why would I not be seeing any hits on the non-HELO ones? I have trusted_networks configured correctly. I have the plugin enabled and I see no errors with a spamassassin --lint -D. All the SPF dependencies are loaded. I am using SA 3.1 / sa-exim / exim 4.60 / Debian 3.1. I really have no idea on how to proceed from here. How does one test the SPF tests and get debug output on it? Here is some debug output that may or may not be useful: /# spamassassin --lint -D 2>&1 | grep -i spf [29944] dbg: diag: module installed: Mail::SPF::Query, version 1.997 [29944] dbg: config: read file /usr/share/spamassassin/25_spf.cf [29944] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf [29944] dbg: config: read file /etc/spamassassin/70_sare_whitelist_spf.cf [29944] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC [29944] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310) [29944] dbg: plugin: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: spf: message was delivered entirely via trusted relays, not required [29944] dbg: plugin: registering glue method for check_for_spf_neutral (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: spf: message was delivered entirely via trusted relays, not required [29944] dbg: plugin: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: plugin: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: plugin: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: plugin: registering glue method for check_for_def_spf_whitelist_from (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: spf: cannot get Envelope-From, cannot use SPF [29944] dbg: spf: def_spf_whitelist_from: could not find useable envelope sender [29944] dbg: plugin: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: plugin: registering glue method for check_for_spf_whitelist_from (Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)) [29944] dbg: spf: spf_whitelist_from: could not find useable envelope sender Thanks, Kris