Your comment made me look into the issue a little more and I see that a mail server is listed as "trusted" when I don't think it should be. In the email below, the relay on 205.158.62.78 is listed as "trusted" in my logs. Surely this is an error? Certainly, this is not a server under my control.
In this context "trusted" means that SA can trust that the message really passed through that IP address, and that it can't be a forgery. It does not mean that the server is "trusted" to not send spam.
Since your own server wrote a header declaring it got the message from " 205.158.62.78" SA trusts the fact the message did in fact come from there at some point.
Basically the "trusted" part has to do with things like DNS whitelists.. For these tests, SA must only use addresses that it can "trust" the mail really went through. Otherwise it'd be easy for a spammer to add a bunch of forged Received: headers and have one of them be a bondedsender listed IP address, or some other such thing.
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk