[selcuka]

I once debugged an email delivery issue which turned out to be a similar filter which included email headers while scanning, ending up blocking any email that passed through an SMTP server called foo.sussex.bar.hp.com (or maybe it was Essex, my memory is hazy).