Your missing the case where the mail is not coming from a private network or
a nated server.

I experience this problem (as mentioned in the bug report) from roaming
users who are connecting through authenticated SMTP to their mail server,
and relaying to me. I'd have to trust all the IP pools of every dynamic
user - or the network of every SMTP server of every trusted network.

This would potentially be hundreds of networks...

None of these servers are nated - the IP causing the problem is the IP of
the original message submitter - not the relaying server, but even if
trusting the IP of the relaying server works I'd still have to track all of
them down - yes?

Or am I missing something?

m/

> -----Original Message-----
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Sunday, January 18, 2004 7:54 PM
> To: Mitch (WebCob); Gerry Doris
> Cc: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] SpamAssassin checks on Received headers (and RBL's
> such as RCVD_IN_SORBS)
>
>
> At 05:49 PM 1/18/04 -0800, Mitch \(WebCob\) wrote:
> >Problem with this fix is it only fixes things for my users
> locally - when my
> >users send mail to someone else, they would have to set the same
> networks as
> >trusted.
>
> This is untrue..
>
> What ALL affected admins must do is set trusted_networks to is
> _their own_
> server.. not having anything to do with the source.
>
> Of course, you can't fix other people's broken servers, but they do NOT
> need to enter your IP to fix the dynablock mislisting bug.
>
> ie: at my work xanadu.evi-inc.com was tripping dynablock on messages from
> my comcast account.. xanadu is a NAT'ed server. I had to add the
> following
> line to xanadu's local.cf to stop the misfire. (note here is
> 192.168.xx.xx
> is the IP address of xanadu's ethernet interface, which static maps to a
> public IP as it goes through a NAT router).
>
> trusted_networks 192.168.xx.xx/32
>
> That's got nothing to do with trusting any of comcast's IPs.. and
> applying
> that one line fixed _all_ the mis-checked dynablocks.
>
>



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to