more ALL_TRUSTED issues?

2005-02-10 Thread alan premselaar
Today I got an email thru which hit ALL_TRUSTED.  My mail server isn't
NAT'd. I haven't specifically setup trusted_networks or
internal_networks but this is the first I've had a problem with it.

I'm running RH 9 with Sendmail 8.13.3, MIMEDefang 2.49, SpamAssassin 3.02.

the Received headers look a little funky but I haven't really checked
them against any RFCs.  is this a problem with SA? or my setup?

any help is appreciated.

thanks,

alan

here are the unaltered headers of the email in question:

Return-Path: [EMAIL PROTECTED]
Received: from sndr199.beta-ca.mxsvrbsminc.net
(sndr199.beta-ca.mxsvrbsminc.net [72.5.1.199])
by mojo.12inch.com (8.13.3/8.13.0) with ESMTP id j1A1JvBx029323
for [EMAIL PROTECTED]; Thu, 10 Feb 2005 10:19:57 +0900
Received: by sndr199.beta-ca.mxsvrbsminc.net id h1apo006574r; Wed, 9 Feb
2005 16:55:49 -0800 (envelope-from [EMAIL PROTECTED])
Received: from localhost by BSMgateway.
()
with ESMTP id mid98433179.msg
for [EMAIL PROTECTED]; Wed, 9 Feb 2005 16:55:49 -0800
Date: Wed, 9 Feb 2005 16:55:49 -0800
From: "Little-Blue Pill." [EMAIL PROTECTED]
To: "Online Consumer" [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Subject: Is this what your life is like alien?
Message-ID: [EMAIL PROTECTED]
X-envid: 98433179
X-Mailer: MOM Agent (v.9.8.433179)
X-CRC32ID: 38112EE1;AEF06669;D9F55A5F
x-MOMID1: VFdZVl1FQlQJAQAHVFRYUlwA
x-MOMID2: XF5dUFVHW14cCQcA
x-MOMID3: XV1CVVdbRVgSAQYPWFpXUVpPICNjHQIGXVtaXVleQ10LBAQbWloA
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--98433179_abFeb1029"
X-Spam-Scanner: SpamAssassin 3.02 (http://www.spamassassin.org/) on
mojo.12inch.com
X-Spam-Score: 1.857 / 4.000: 26.857%
X-Spam-Tests:
DCC_CHECK(2.169),BAYES_99(1.886),URIBL_SBL(0.996),HTML_IMAGE_RATIO_04(0.105),HTML_MESSAGE(0.001),ALL_TRUSTED(-3.300)
X-SPF-Header: mojo.12inch.com: domain of
[EMAIL PROTECTED] designates 72.5.1.199 as permitted sender
X-Scanned-By: MIMEDefang 2.49 on 64.7.201.48

Re: more ALL_TRUSTED issues?

2005-02-10 Thread Sandy S
Alan -
I ran into this same issue earlier - the IP address your message came from
is incorrectly marked in the current version of Spamassassin as being a
reserved IP address.  It sounds like this issue has been fixed in future
versions of Spamassassin, but meanwhile you can use the fix which Kris Degau
kindly provided me - it's in the original thread:
http://marc.theaimsgroup.com/?l=spamassassin-usersm=110555682017732w=2

Thanks again, Kris!

Sandy

- Original Message - 
From: "alan premselaar" [EMAIL PROTECTED]
To: "SpamAssassin list" users@spamassassin.apache.org
Sent: Wednesday, February 09, 2005 9:51 PM
Subject: more ALL_TRUSTED issues?


 Today I got an email thru which hit ALL_TRUSTED.  My mail server isn't
 NAT'd. I haven't specifically setup trusted_networks or
 internal_networks but this is the first I've had a problem with it.

 I'm running RH 9 with Sendmail 8.13.3, MIMEDefang 2.49, SpamAssassin 3.02.

 the Received headers look a little funky but I haven't really checked
 them against any RFCs.  is this a problem with SA? or my setup?

 any help is appreciated.

 thanks,

 alan

 here are the unaltered headers of the email in question:

 Return-Path: [EMAIL PROTECTED]
 Received: from sndr199.beta-ca.mxsvrbsminc.net
 (sndr199.beta-ca.mxsvrbsminc.net [72.5.1.199])
 by mojo.12inch.com (8.13.3/8.13.0) with ESMTP id j1A1JvBx029323
 for [EMAIL PROTECTED]; Thu, 10 Feb 2005 10:19:57 +0900
 Received: by sndr199.beta-ca.mxsvrbsminc.net id h1apo006574r; Wed, 9 Feb
 2005 16:55:49 -0800 (envelope-from [EMAIL PROTECTED])
 Received: from localhost by BSMgateway.
 ()
 with ESMTP id mid98433179.msg
 for [EMAIL PROTECTED]; Wed, 9 Feb 2005 16:55:49 -0800
 Date: Wed, 9 Feb 2005 16:55:49 -0800
 From: "Little-Blue Pill." [EMAIL PROTECTED]
 To: "Online Consumer" [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 Subject: Is this what your life is like alien?
 Message-ID: [EMAIL PROTECTED]
 X-envid: 98433179
 X-Mailer: MOM Agent (v.9.8.433179)
 X-CRC32ID: 38112EE1;AEF06669;D9F55A5F
 x-MOMID1: VFdZVl1FQlQJAQAHVFRYUlwA
 x-MOMID2: XF5dUFVHW14cCQcA
 x-MOMID3: XV1CVVdbRVgSAQYPWFpXUVpPICNjHQIGXVtaXVleQ10LBAQbWloA
 MIME-Version: 1.0
 Content-Type: multipart/alternative;
 boundary="--98433179_abFeb1029"
 X-Spam-Scanner: SpamAssassin 3.02 (http://www.spamassassin.org/) on
 mojo.12inch.com
 X-Spam-Score: 1.857 / 4.000: 26.857%
 X-Spam-Tests:

DCC_CHECK(2.169),BAYES_99(1.886),URIBL_SBL(0.996),HTML_IMAGE_RATIO_04(0.105)
,HTML_MESSAGE(0.001),ALL_TRUSTED(-3.300)
 X-SPF-Header: mojo.12inch.com: domain of
 [EMAIL PROTECTED] designates 72.5.1.199 as permitted
sender
 X-Scanned-By: MIMEDefang 2.49 on 64.7.201.48