It’s been discussed on Amavisd-new list. Look here for more info: http://marc.theaimsgroup.com/?t=116483411500019&r=1&w=2
________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, November 30, 2006 4:40 PM To: לאון קולצ'ינסקי; users@spamassassin.apache.org Subject: RE: RE: How to extract the Reverse DNS hostname by script means? Hello! "Leon Kolchinsky" <[EMAIL PROTECTED]> wrote on 19.11.2006 09:28:14: > Hi Bret, > > According to tip from Gary V. you can reliably use whitelist_from_rcvd, > You only should configure the following parameters right: > > trusted_networks > internal_networks > > > > Best Regards, > Leon Kolchinsky > ... > SpamAssassin will be testing the whitelist_from_rcvd against the topmost > (final) received header when SA runs, so that's the one you need to look > at. ... Well, does SA really check *only* topmost header? I've found that whitelist_from_rcvd works only if e-mail has *only one* "received:" header that fits with corresponding whitelist_from_rcvd record. If there are some additional "untrusted" "received:" headers in e-mail then whitelisting fails for me... Here is my configuration. my_server1.my_domain1.com is our SMTP server with Exim + SpamAssassin installed. my_server.my_domain.com acts as a relay for the first server (it can send both it's own mail and external mail to my_server1.my_domain1.com). my_server.my_domain.com is added in trusted_networks. For example, I have the following record in my local.cf: whitelist_from_rcvd [EMAIL PROTECTED] my_domain.com. E-mail with the following *two* "received:" headers will not be whitelisted while with the *first* only will be: Received: from my_server.my_domain.com ([XXX.XXX.XXX.XXX]) by my_server1.my_domain1.com with esmtp (Exim 4.63) (envelope-from <[EMAIL PROTECTED]>) id 1Gpcaa-0003ZF-Ti for [EMAIL PROTECTED]; Thu, 30 Nov 2006 06:27:57 +0300 Received: from alien_server.alien_domain.com ([YYY.YYY.YYY.YYY]) by my_server.my_domain.com (8.13.6/8.13.4) with SMTP id kAU3ROA5001821 for <[EMAIL PROTECTED]>; Thu, 30 Nov 2006 06:27:50 +0300 (MSK) (envelope-from [EMAIL PROTECTED]) So, Am I missing something? Thanx in advance. Vitaly.
