You need to either get him to change the way he sends his emails or adjust your scores!
If he is sending directly from a dynamic IP address then he will be blocked by a lot of peoples filters - for instance there is no chance of his emails being accepted by AOL! The way round this is for him to relay through his ISPs outgoing mail server if at all possible. i.e. put smtp.ispname.com (or somthing like that) in the outgoing server address of his email client. If you want to accept emails from people with a similar setup to his without adding them manually to a whitelist, then you will have to reduce the scores for the rules which fire on these mails. Edit your local.cf file (probably in /etc/mail/spamassassin) to include somthing like: score FH_HOST_ALMOST_IP 1.0 score FH_HOST_EQ_DYNAMICIP 1.0 score RCVD_IN_SORBS_DUL 0.5 This will still help to catch some spam (though is has reduced the amount you will catch) but will hopefully be enough to let emails like this through as long as they don't hit any other rules. I would suggest NOT using the BOTNET pluggin as it will probably make the problem worse! -- View this message in context: http://www.nabble.com/False-negative-tf4335349.html#a12347708 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.