On Thu, 08 Dec 2016 16:54:26 +0100 Marcus Schopen wrote: > Hi, > > some of my users forward external mails to my host. In some cases > those forwarding hosts don't filter spam. How do I parse back through > forwarding headers to find the true source IP and run dnsrbl checks on > that IP. I don't want to reject those mails in case of spam, so that > the forwarding host will become a backscatter, but just marking them. > I tried to set the forwarding host IPs to trusted_networks, which > helps with wrong dnswl.org checks, but RBL checks are disabled then. > Any ideas how to handle that?
You need to put them in internal networks for spamassassin to do last-external checks.