Hi, Am Samstag, den 17.12.2016, 13:17 +0000 schrieb RW: > On Fri, 16 Dec 2016 22:41:49 +0100 > Marcus Schopen wrote: > > > > The problem is, that smtp-out.myoffice.de is also a submission server > > for dialup clients. Headers from to to down: > > > > Received: from smtp-out.myoffice.de by MY_SERVER_IP > > Received: from dialup-client-IP by smtp-out.myoffice.de > > SpamAssassin usually deals with this problem by looking for > authentication in the header, but that's not recorded here.
There is no auth hint in the header when using the submission server. Received: from [192.168.178.25] ([my dynamic IP]) by smtp-out.myoffice.de (Oracle Communications Messaging Server 7.0.5.37.0 64bit (built Jan 25 2016)) with ESMTPPA id <0OIA00E6KOQ65A80@smtp-out,myoffice> for i...@test.de; Fri, 16 Dec 2016 21:25:20 +0100 (CET) I think they manipulate the header or have a proxy, because the smtp host in my mailclient is smtp.myoffice.de (with a another IP) and not smtp-out.myoffice.de. But smtp-out.myoffice.de comes up as the first connecting host for the mail client. > I think your best option is to leave it in internal_networks and write > a custom rule to take some points off when it's submission. Good idea, something like if smtp-out.myoffice.de is the first trusted (header from down to top) 10 points off. How can I do that or what would you think? Ciao!