> Even with TRUSTED_NETWORKS set, the RCVD_IN_SORBS_DUL rule is triggered. I don't see how this is correct, when the IP address that triggered it was not the last hop. This rule should only be triggered when "sent directly from dynamic IP address"
If someone hasn't suggested it already, post your trusted_* config lines along with the headers for a message that you think hit wrong, and we can probably help you figure out what is going wrong. The first guess would be that you don't have trusted_networks set quite *right*, even though you have it set to *something*. Loren