> -----Original Message----- > > Based on the headers you included, there's nothing indicating the sender > was authenticated. Are you using the following in postfix? > > smtpd_sasl_authenticated_header yes
No, I'm not -- that's a good idea. If I turn that on, can I write a rule based on it, or will SA pick up on it automatically? Thanks, Aaron