Matt, On Mon, 29 Dec 2003, Matt Kettler wrote:
> At 02:50 PM 12/29/2003, Simon Matthews wrote: > >Your comment made me look into the issue a little more and I see that a > >mail server is listed as "trusted" when I don't think it should be. In the > >email below, the relay on 205.158.62.78 is listed as "trusted" in my logs. > >Surely this is an error? Certainly, this is not a server under my control. > > In this context "trusted" means that SA can trust that the message really > passed through that IP address, and that it can't be a forgery. It does not > mean that the server is "trusted" to not send spam. > > Since your own server wrote a header declaring it got the message from " > 205.158.62.78" SA trusts the fact the message did in fact come from there > at some point. > > Basically the "trusted" part has to do with things like DNS whitelists.. > For these tests, SA must only use addresses that it can "trust" the mail > really went through. Otherwise it'd be easy for a spammer to add a bunch of > forged Received: headers and have one of them be a bondedsender listed IP > address, or some other such thing. I think I found the problem. The relay that calls itself "mail.paxonet.com" is the machine that receives the mail from non-local servers. Yet, within the LAN (where SA runs), this name resolves to a 192.168. address. Thus, SA thinks that mail.paxonet.com is actually only a local relay. I used the "clear_trusted_networks" before manually setting "trusted_networks" and it now seems to work properly. Thanks for you help. It showed me what to look for and with this, I was able to fix the problem. Simon ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
