Sorry for the confusion. I am talking about connecting from an untrusted IP. We do have authentication enabled on our SMTP server to disable relaying for unknown users but as far as I can tell there's nothing in the headers that seems to show this.
ie: pc -> smtp1 -> inbox (just shows the PCs IP (dynamic) and receiving server info) ie: pc -> smtp2 -> smtp1 -> inbox (shows info from my sending smtp2 server which I can use for whitelisting for a domain name that is external to smtp1). I'll take a look at the headers again and see if there's any sort of rule I can match against the header of the internal email. -- View this message in context: http://old.nabble.com/Whitelisting-local-domain-%28spamassassin---qmail%29-tp28364411p28374803.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.