From: "Dhaval Patel" <[EMAIL PROTECTED]>

"Daryl C. W. O'Shea" <[EMAIL PROTECTED]> said:

Dhaval Patel wrote:
> I hope that I am asking for this kind of help in the right place.
> > I always look into why any spam got into my Inbox and found the reasons for this > message troubling. I use spamc in the maildrop rule but I put that message > through spamassassin -t -D and get the same score so I am assuming that it is >running the exact same way. I have pasted the output below. > > I checked the sender IP and it seems that they are blacklisted on sbl-xbl as well as > a few other lists. But spamassassin did not pick this up. Can anybody give any > insight into this? I do see other spams being caught because of RBLs. > What is "-3.3 ALL_TRUSTED Did not pass through any untrusted hosts" How > is it determined that the host (71.214.161.98) was trusted.

You need to configure your trusted_networks. See this wiki article:

http://wiki.apache.org/spamassassin/TrustPath

OK, adding trusted_networks myIP to local.cf works. Now I get
3.5 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr 2)

which makes the spam score 8.9 which is considered as spam.

I have read that article before but assumed that it was only if your mail 
server was
behind a NAT, which mine is not. Do other people on this list find that they 
must set
this option in order for SA to avoid problems like I experienced?

If email comes to your machine via an MX record then you probably need
to trust your machine by its address on the Internet not (just) by
127.0.0.1.

{^_^}

Reply via email to