On Mon, 27 Nov 2017 13:57:25 +0100 Ralf Hildebrandt wrote: > How can I distinguish my internal networks from the evil internet in a > spamassassin rule? > > I want to give messages coming from "not mynetworks" but using my > domain in the From: header some additional points: > > header MY_FROM From =~ /charite.de/i > describe MY_FROM Sender is from charite.de > > # Now you create a rule to combine them: > meta MY_FROM_FROM_OUTSIDE MY_FROM && > HOW_DO_I_QUERY_TRUSTED_NETWORKS describe MY_FROM_FROM_OUTSIDE Sender > is from my domain, but comes from the outside score > MY_FROM_FROM_OUTSIDE 1.0
Anything that only passed through trusted servers should hit ALL_TRUSTED. Check that that that is so before relying on it, as it may need some additional configuration.
