On my local server, I have SA running from within postfix+amavisd

My TRUST PATH works for 'sent-directly-to-me' mail.  For 'forwarded-to-me' 
mail, it incorrectly IDs my own internal IPs as untrusted relays.

How do I teach SA to correctly NOT id my own servers as untrusted?

Details ...

If I send from a remote TO my local server, 

        FROM myn...@operamail.com -> TO postmas...@dddd1.com

with TRST PATH

        clear_trusted_networks
        clear_internal_networks
        internal_networks  127.0.0.0/8 192.168.1.100/24 192.168.2.100/24 
X.X.X.142/32 X.X.X.143/32
        trusted_networks               192.168.1.100/24 192.168.2.100/24 
X.X.X.142/32 X.X.X.143/32 66.111.4.0/24 82.221.106.240/29

untrusted relays are correctly identified in the mail received @ 
postmas...@dddd1.com

        X-Spam-Relays-Untrusted:
                [ ip=66.111.4.29 rdns=out5-smtp.messagingengine.com
                        helo=out5-smtp.messagingengine.com by=mailhost.DDDD.com 
ident= envfrom=
                        intl=0 id= auth= msa=0 ]
                [ ip=10.202.2.43 rdns=compute3.nyi.internal
                        helo=compute3.internal by=mailout.nyi.internal ident= 
envfrom= intl=0
                        id=2F39520771 auth= msa=0 ]
                [ ip=10.202.2.214 rdns= helo=web4
                        by=compute3.internal ident= envfrom= intl=0 id= auth= 
msa=0 ]

BUT, if I *FORWARD* an email from the remote

        FROM ot...@dddd1.com -> TO myn...@operamail.com
        AUTO-FORWARD FROM myn...@operamail.com -> TO postmas...@dddd1.com

ALL my internal relays are now seen as untrusted

        X-Spam-Relays-Untrusted:
                [ ip=66.111.4.223
                        rdns=forward1-smtp.messagingengine.com 
helo=forward1-smtp.messagingengine.com
                        by=mailhost.DDDD.com ident= envfrom= intl=0 id= auth= 
msa=0 ]
                [ ip=10.202.2.84 rdns=imap34.nyi.internal 
helo=imap34.nyi.internal
                        by=mailforward.nyi.internal ident= envfrom= intl=0 
id=8A5B1218A8 auth= msa=0 ]
                [ ip=10.202.2.42 rdns=compute2.nyi.internal 
helo=compute2.internal
                        by=sloti34d2t10 ident= envfrom= intl=0 id= auth=LMTPA 
msa=0 ] [
                        ip=10.202.2.202 rdns= helo=mx3 by=compute2.internal 
ident= envfrom= intl=0
                        id= auth= msa=0 ]

                [ ip=127.0.0.1 rdns=localhost helo=mx3.messagingengine.com
                        by=mx3.nyi.internal ident= envfrom= intl=0 
id=E3F81C003B auth= msa=0 ]
                [ ip=127.0.0.1 rdns=localhost helo=mx3.nyi.internal 
by=mx3.messagingengine.com
                        ident= envfrom= intl=0 id=01AA0B67021.837A3C00DC auth= 
msa=0 ]
                [ ip=X.X.X.142 rdns=mail.DDDD.com helo=mailhost.DDDD.com
                        by=mx3.messagingengine.com ident= envfrom= intl=0 
id=837A3C00DC auth= msa=0 ]
                [ ip=127.0.0.1 rdns=localhost helo=localhost 
by=mailhost.DDDD.com ident=
                        envfrom= intl=0 id=1226A64511 auth= msa=0 ]
                [ ip=192.168.1.100 rdns=
                        helo=amavis-feed.mail.DDDD.com by=localhost ident= 
envfrom= intl=0
                        id=q_TiKdHdHvcA auth= msa=0 ]
                [ ip=192.168.2.100
                        rdns=internal.mail-backend.DDDD.com 
helo=mail-backend.DDDD.com
                        by=mailhost.DDDD.com ident= envfrom= intl=0 
id=DD95E62B44 auth= msa=0 ]
                [ ip=127.0.0.1 rdns=localhost helo=mail-backend.DDDD.com
                        by=mail-backend.DDDD.com ident= envfrom= intl=0 
id=2F3D0102846 auth= msa=0 ]
                [ ip=127.0.0.1 rdns=localhost helo=localhost 
by=mail-backend.DDDD.com ident=
                        envfrom= intl=0 id=D3CFB102849 auth= msa=0 ] [ 
ip=10.0.0.1
                        rdns=smtp-auth.mail-backend.DDDD.com 
helo=smtp-auth.mail-backend.DDDD.com
                        by=mail-backend.DDDD.com ident= envfrom= intl=0 
id=55501102846 auth=ESMTPSA
                        msa=0 ]

Reply via email to