for a rule with such a HIGH score, it has several FP's on (yes, broken) web mail servers that like to do stupid things with headers.
yes, I verified it is a legit, single, non bulk, email from a human and not a bot.

examples: (this line: Received: from 98.183.30.70 by webmail.east.cox.net; Sat, 8 May 2010 18:10:45 -0400)

I can't even write a rule to credit for a fp since it isn't included in headers for final tests.


Received: from eastrmmtao101.cox.net (unknown [68.230.240.7]) by mx1.wasatchsoftware.com.ionspam.net (Postfix) with ESMTP id D25185F9805 for <printware@alexanders.com>; Sat,  8 May 2010 16:10:51 -0600 (MDT)
Received: from eastrmimpo03.cox.net ([68.1.16.126]) by eastrmmtao101.cox.net (InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP id <20100508221045.FRHS14747.eastrmmtao101.cox.net@eastrmimpo03.cox.net> for <printware@alexanders.com>; Sat, 8 May 2010 18:10:45 -0400
Received: from eastrmwml44 ([172.18.18.217]) by eastrmimpo03.cox.net with bizsmtp id FAAl1e00S4h0NJL02AAlnP; Sat, 08 May 2010 18:10:45 -0400
Received: from 98.183.30.70 by webmail.east.cox.net; Sat, 8 May 2010 18:10:45 -0400
X-vr-score: 0.00
X-authority-analysis: v=1.1 cv=1tC8gCE8abT1P00P8zsYPuKJ/q6rKOuccKMKwfwf08U= c=1 sm=1 a=mZE9scw3kJ0A:10 a=IkcTkHD0fZMA:10 a=P3oqbXP5sqGz4d3Vjsvn5A==:17 a=hPYCcLpRCrzQ7onzUUAA:9 a=nkMQMz7_8wVTVEg82pHHLP8rVrgA:4 a=QEXdDO2ut3YA:10 a=VH2du2xvHnUA:10 a=P3oqbXP5sqGz4d3Vjsvn5A==:117
X-cm-score: 0.00
Message-i=Id: <20100508181045.0TNXQ.299271.imail@eastrmwml44>
Date: Sat, 8 May 2010 18:10:45 -0400
From: <richholz1@cox.net>
To: "printware@alexanders.com" <printware@alexanders.com>
Subject: Print Order Questions
Mime-version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding:7bit
X-priority:3 (Normal)
Sensitivity: Normal