Helmut Schneider wrote: > If I understood you correctly I'd need to add all relays of MessageLabs > to trusted_networks and also track any IP address changes...
If you're using them as your primary spam filter provider, you should have information somewhere on which IP block(s) your mail will go through. If your mail MUST pass through those systems before it hits your own inbound servers, you probably have those IPs noted for a firewall or MTA ACL already so "The Internet" can't bypass your filter provider. You don't have to add each individual IP; you can add netblocks like this: trusted_networks 192.168.10.0/24 We've got a /22 for our inherited filter provider listed. If you don't have that info, and their support refuses to tell you, tailing your inbound logs for a while should give you a pretty good idea what segments of their system your mail flows through... but if their support refuses to tell you, I'd be looking at switching providers; knowing where your mail will legitimately go through your filter provider's systems is important. -kgd
