Package: spamassassin Version: 3.3.2-2 I have been seeing a lot of spam lately, with -1 points due to ALL_TRUSTED. Even though the mail clearly came from untrusted hosts.
Althugh I notice the problem using spamc/spamd, plain spamassassin produces the same problem. spamassassin -D on soms spam produces (in part): Oct 31 12:20:16.159 [25749] dbg: received-header: parsed as [ ip=81.92.114.173 rdns= helo=lithium-onseth.ccemails.com by=ns.horizon.com ident= envfrom= intl=0 id= auth= msa=0 ] Oct 31 12:20:16.160 [25749] dbg: received-header: relay 81.92.114.173 trusted? yes internal? yes msa? no Oct 31 12:20:16.160 [25749] dbg: metadata: X-Spam-Relays-Trusted: [ ip=81.92.114.173 rdns= helo=lithium-onseth.ccemails.com by=ns.horizon.com ident= envfrom= intl=1 id= auth= msa=0 ] Oct 31 12:20:16.160 [25749] dbg: metadata: X-Spam-Relays-Untrusted: Oct 31 12:20:16.160 [25749] dbg: metadata: X-Spam-Relays-Internal: [ ip=81.92.114.173 rdns= helo=lithium-onseth.ccemails.com by=ns.horizon.com ident= envfrom= intl=1 id= auth= msa=0 ] Oct 31 12:20:16.160 [25749] dbg: metadata: X-Spam-Relays-External: even though I have carefully read http://wiki.apache.org/spamassassin/FixingAllTrusted and associated pages and tried to follow all of the instructions. /etc/spamassassin/local.cf contains: clear_trusted_networks trusted_networks 192.35.100/24 clear_internal_networks internal_networks 192.35.100.1 71.41.210.146/31 Which should clearly say "81.92.114.173 is neither trusted nor internal, damn it!" There is no override in ~/.spamassassin.cf. What I can't figure out is where spamassassin is getting the bizarre idea that that IP is trusted. Any ideas? Thank you! -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
