From: Matthew Lenz [mailto:[EMAIL PROTECTED] > > Also make sure that if you are using bayes learning that > spamassassin is still able to read the bayes_ files. There must > have been some incompatibility with mine because I had to nuke > everyones bayes_ files and return sa-learn so that bayes started > kicking in again. Also the config problem that Bill described bit > me in the ass as well. Almost all incoming mail was being tagged as > ALL_TRUSTED.
It tends to bite quite a few people and should probably qualify as an FAQ by now. If you don't specify trusted_networks or internal_networks, SA tries to guess at your network. It assumes that the first non-private IP that it sees is your external mail relay. If your frontline mailserver has a private IP, then the server that is sending to you is assumed to be your external relay and is trusted. The result is that all mail that doesn't pass through more than one mail relay before getting to you will be marked ALL_TRUSTED. Bowie
