Matt Kettler wrote:
Robert Fitzpatrick wrote:
I have the following in my local.cf file, but some messages get blocked
still, see my log entries below. I use amavisd-new and it seems those in
the log that show localhost as the client pass through and those
directly from the blackberry get blocked. Not sure why all would not be
coming from the amavisd localhost, can someone tell me what is going on?
Perhaps my whitelist_from_rcvd line is wrong? I want anything coming
from a user at culin.com using their blackberry to bypass filtering.

whitelist_from_rcvd [EMAIL PROTECTED] blackberry.com

Passed message:
<snip useless mail logs>

My guess is one of the following two has occured, in order of likelyhood:

1) that SA doesn't have the right trusted_networks. (if your MX server
has a private IP  (ie: static NAT) you *MUST* declare trusted_networks
manually. The auto-guesser won't handle this scenario properly)
2) SA can't parse your received headers.

You can test this by running one of the messages through spamassassin
-D. If you need help, post the debug info here
Thanks, I am running static NAT, but with public IP addresses. The MX server does not have a private IP, it has a public IP address using NAT policies for outbound traffic in the firewall for proper rDNS. The configuration of the SonicWall firewall allows us to use multiple public subnets behind one WAN port.

The only message I have to run through SA is a blocked one, sorry, but how do I capture the debug output to file for posting here? I tried the following and got a copy of the file:

I did see some things referencing headers in the debug:

[38446] dbg: rules: running header regexp tests; score so far=0

[38446] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"

[38446] dbg: rules: ran header rule __SANE_MSGID ======> got hit: "<[EMAIL 
PROTECTED]>

[38446] dbg: rules: "

[38446] dbg: rules: ran header rule __CT ======> got hit: "m"

[38446] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: """

[38446] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "F"

[38446] dbg: rules: ran header rule __MSGID_OK_HEX ======> got hit: "96205411"

[38446] dbg: rules: ran header rule __BOUNCE_RP1 ======> got hit: "<>"

[38446] dbg: rules: ran header rule __SARE_WHITELIST_FLAG ======> got hit: """

[38446] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"

[38446] dbg: rules: ran header rule __FROM_ENCODED_B64 ======> got hit: 
"=?UTF-8?B?"

[38446] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit: 
"boundary"

[38446] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"

[38446] dbg: rules: ran header rule __RATWARE_0_TZ_DATE ======> got hit: " 
+0000"

[38446] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit: 
"2049971341"

Thanks,

Robert

Reply via email to