Just a FYI but SA scores failures of "~all" much stronger than it does for "-all"
eg I just deliberately forged an email for my own domain and SA picked up the SPF hard failure.... and added 0.0 to the final score :-( The logic of the score is well documented, just shows how much SPF doesn't work http://spamassassin.1065346.n5.nabble.com/default-score-for-SPF-HELO-FAIL-too-low-td13894.html That's it - I'm removing SPF... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1