Joseph Brennan writes:

>> Reply-to:

> First pass:
> header LOCAL_REPLYTO_LIVE Reply-to =~ /\@live\.com/
> Maybe scoring 8.0 for one thing scares you, but I haven't seen this
> fp in a couple of months.

Is a legitimate email sender? It looks microsoft related. If I
set it to 8, then any mail from that address is surely to get caught as
spam, which may not be the right thing depending on other potential
legitimate addresses sending from that domain.

Or perhaps nothing but spam comes from I dont know anything
about it.