Hey guys, I installed postfix/amavisd/etc. following the howto on this site but I'm having some trouble interpreting sa's rules. It's this one I'm wondering about: Code: header HELO_EQ_NL X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=[^ ]+\.nl /i score HELO_EQ_NL 0.55 #counts HELO_EQ_NL 100s/1h of 41686 corpus (34078s/7608h FVGT) 03/27/06 header HOST_EQ_NL X-Spam-Relays-Untrusted =~ /^[^\]]+ rdns=[^ ]+\.nl /i score HOST_EQ_NL 1.545 #counts HOST_EQ_NL 264s/0h of 41722 corpus (34113s/7609h FVGT) 03/27/06 This seems to say anything originating from the .nl tld is counted (somewhat) as spam automatically. Am I reading this right? If so, why?