On Wed, 18 Feb 2015 22:27:56 +0100 Reindl Harald wrote: > is it expected that both fire? > i don't know the message but noticed it in the logs > > AXB_HELO_HOME_UN,HELO_LH_HOME >
They'd be nearly identical if they both ran on X-Spam-Relays-External. The use of X-Spam-Relays-Untrusted seems to be a mistake. header AXB_HELO_HOME_UN X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\w+\.(lan|home) /i header HELO_LH_HOME X-Spam-Relays-External =~ /^[^\]]+ helo=\S+\.(?:home|lan) /i
