On Wed, 21 Jan 2004, Justin Mason wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> Will McCutcheon writes:
> >I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22.
[snip..]
> >A's IP as being in an RBL of dynamic IP's, despite my setting in
> >/etc/mail/spamassassin/local.cf instructing it to trust that IP.  The
> >documentation for Mail::SpamAssassin::Conf seems to pretty clearly say
> >that RBL checks will never be performed on any trusted IP's, but it
> >certainly appears to be occurring here.
>
> Yep -- this is a case where it will occur.  This is because the
> mail has gone *outside* of the trusted zone -- and the untrusted
> host B could be under the control of spammer who just forged a
> Received header to make it look like it came from the trusted
> host A.  We can't trust that.
>
> Same for the next case btw.
>
> - --j.

Thus, if you -can- trust server 'B' add it to your trusted_networks
list, so the whole chain will be trusted and all will be well. ;)


-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to