It’s been discussed on Amavisd-new list.
Look here for more info: http://marc.theaimsgroup.com/?t=116483411500019r=1w=2
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 30, 2006 4:40 PM
To: לאון קולצ'ינסקי; users@spamassassin.apache.org
Subject: RE: RE: How to extract the Reverse DNS hostname by script means?
Hello!
Leon Kolchinsky [EMAIL PROTECTED] wrote on 19.11.2006 09:28:14:
Hi Bret,
According to tip from Gary V. you can reliably use whitelist_from_rcvd,
You only should configure the following parameters right:
trusted_networks
internal_networks
Best Regards,
Leon Kolchinsky
...
SpamAssassin will be testing the whitelist_from_rcvd against the topmost
(final) received header when SA runs, so that's the one you need to look
at.
...
Well, does SA really check *only* topmost header? I've found that
whitelist_from_rcvd works only if e-mail has *only one* received: header that
fits with corresponding whitelist_from_rcvd record. If there are some
additional untrusted received: headers in e-mail then whitelisting fails
for me...
Here is my configuration.
my_server1.my_domain1.com is our SMTP server with Exim + SpamAssassin
installed.
my_server.my_domain.com acts as a relay for the first server (it can send both
it's own mail and external mail to my_server1.my_domain1.com).
my_server.my_domain.com is added in trusted_networks.
For example, I have the following record in my local.cf:
whitelist_from_rcvd [EMAIL PROTECTED] my_domain.com.
E-mail with the following *two* received: headers will not be whitelisted
while with the *first* only will be:
Received: from my_server.my_domain.com ([XXX.XXX.XXX.XXX])
by my_server1.my_domain1.com with esmtp (Exim 4.63)
(envelope-from [EMAIL PROTECTED])
id 1Gpcaa-0003ZF-Ti
for [EMAIL PROTECTED]; Thu, 30 Nov 2006 06:27:57 +0300
Received: from alien_server.alien_domain.com ([YYY.YYY.YYY.YYY])
by my_server.my_domain.com (8.13.6/8.13.4) with SMTP id kAU3ROA5001821
for [EMAIL PROTECTED]; Thu, 30 Nov 2006 06:27:50 +0300 (MSK)
(envelope-from [EMAIL PROTECTED])
So, Am I missing something? Thanx in advance.
Vitaly.