I have repeatable logged evidence that emails to addresses in my Spam
Address file are not identified as such (has spam address) if they HELO with
a domain that is in my spam.DB. When this criteria is met, the spam could
go right through to the mail server. Obviously now it hits other checks I
have added due to identifying this issue, but I am pointing out that there
is still something not quite right. The Spam Addresses are being identified
correctly most of the time, but when the sending HELO is in the spam.DB they
are not identified as Spam Address and skip the rest of the early testing
including delaying. Now I have added all my spam addresses to the bombRE to
catch this scenario and that is working well enough but it seems like a
bandaid and has caused at least one false positive.
The Spam Addresses should be identified correctly regardless of what they
HELO as. Right?