OK, thanks. I still have problems exactly understanding the difference between trusted_networks and internal_networks is, though. My understanding is that trusted_networks is our entire ip address range, all hosts (143.210.0.0/16), and internal_networks is mail servers that we run? There are lots of mail servers, some of which I don't know about, and all machines can potentially send mail by connecting to our servers, so should I set this to 143.210. as well? (still remembering, of course, that SA is not scoring internal messages or those on the way out).
Correct (trusted vs. internal).
Since, in your setup, SA only sees external mail, you don't need to worry about adding your other (possibly unknown) mail servers to internal networks. Same goes for trusted hosts. The only thing you need to worry about is your IP(s) that incoming external mail passes through. Add them to trusted & internal networks.
Daryl
