I'm running SpamAssassin 2.60 on a public IP (not NATed) and none of the -notfirsthop rules (including RCVD_IN_DYNABLOCK) have worked correctly for me, either. For reference I'm also running Sendmail and Spamass-milter 0.2.0. Here are the headers from an email that *should* have matched the rule:
Received: from katie.darklegacies.com (pcp044858pcs.trnrsv01.nj.comcast.net [68.46.27.0]) by mail-gateway.metrologic.com (8.12.8/8.12.8) with ESMTP id hA3GIq7M006336
In your case, auto-inference of trusted_networks won't work either. The "by" host in the first Received header is not in the same /16 as the first "From" host.
This is documented in the Mail::SpamAssassin::Conf helpfile under trusted_networks.
Since you are using a MTA outside of your local address range, and your MTA itself is within the DYNABLOCK blacklist, you'll have to manualy set trusted_networks to avoid falses.
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
