On Wed, 21 Jan 2004, Justin Mason wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Will McCutcheon writes: > >I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22. [snip..] > >A's IP as being in an RBL of dynamic IP's, despite my setting in > >/etc/mail/spamassassin/local.cf instructing it to trust that IP. The > >documentation for Mail::SpamAssassin::Conf seems to pretty clearly say > >that RBL checks will never be performed on any trusted IP's, but it > >certainly appears to be occurring here. > > Yep -- this is a case where it will occur. This is because the > mail has gone *outside* of the trusted zone -- and the untrusted > host B could be under the control of spammer who just forged a > Received header to make it look like it came from the trusted > host A. We can't trust that. > > Same for the next case btw. > > - --j.
Thus, if you -can- trust server 'B' add it to your trusted_networks list, so the whole chain will be trusted and all will be well. ;) -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{ ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk