>>From the Mail::SpamAssassin::Conf man page:

trusted_networks ip.add.re.ss[/mask] ...   (default: none)

<snip>

*   if the âfromâ IP address is on the same /16 network as the top
Received lineâs âbyâ host, itâs trusted

*   if the address of the âfromâ host is in a reserved network range,
then itâs trusted

*   if any addresses of the âbyâ host is in a reserved network
range, then itâs trusted


Isn't that too permissive?  I get lots of spam that comes from hosts
which are obviously behind a NAT box (the header shows a 192.168.x.x
"by" address).  IIUC, the default setting is to set that mail as
trusted!  That seems too permissive to me.  Am I still not understanding
trusted_networks correctly?

Thanks!
Thomas

Reply via email to