Bowie Bailey wrote:


Thus, if I'm running SpamAssassin on server xx.yy.zz.ww, and I get a
message from server aa.bb.cc.dd, I want both servers to trust each
other, because I control both servers, and there's no intermediate
relay between the two.


Then you just need to add one line to the config on each server.

On server "xx.yy.zz.ww":
trusted_networks aa.bb.cc.dd

On server "aa.bb.cc.dd"
trusted_networks xx.yy.zz.ww

This is exactly what I'm doing. Yet when I send a spammy test message from a server whose IP address is one that's specified by trusted_networks, the message is getting a full SA score. I have verified on the target server that IP address specified by trusted_networks is the same one shown by the sending server, both from a "relay=" line in the mail logs, and the top Received: line in the received message.


With these settings, they will each see the other as trusted.  Take a
look at the trusted_networks description on the
Mail::SpamAssassin::Conf man page for more details.

I've checked that one several times, but I don't see anything obvious over what I'm already doing.

Is there any way of tracing the behavior, to see what's expected and how things aren't matching when a message actually comes through?




If that doesn't get me where I need to go, I'll see about what I can
do about bypassing SpamAssassin checks for known trusted servers in
MIMEDefang, as suggested by another poster in this thread.


That's another possibility if you really trust those servers not to
relay any spam.  The trusted_networks setting does not give quite that
level of trust.

Still something to consider. In this case, the servers in question are really trusted.

Is there something else I might be missing?

Thanks for your help.

Smith


Reply via email to