Robert Bartlett wrote: > Turned on/enabled, sorry for wrong choice of words. > > Actually I got this advice from this very same list, noone seemed to respond > to the advice given in a bad way so I went ahead and did it.
Yeah, I try to keep on top of the people that suggest that, but I often miss a few. Way too many admins out there that just do a "quick fix" for the symptoms without looking for the real problem. > Knowing what > you told me now what would be the proper setup for my server? Its just a > single server that runs SA for hosted domains. Do I just add the ip address > of the local server and that's all? Put simply: add the IPs of all mailservers you control that add Received: headers. If you've got some kind of NAT going on, use the IP that your SA box will get if it does a lookup on the hostname that appears in the "by" part of a Received: header. For example: My mail comes in to xanadu.evi-inc.com, which has an outside IP of 208.39.141.94. However, that box is behind a static-NAT, and the SA box will resolve xanadu as "192.168.x.y" due to split-dns. I need to trust the 192.168 address, not the 208.39. address.
