On Sat, 10 Nov 2018, listsb wrote:
On Nov 10, 2018, at 21.01, John Hardin <jhar...@impsec.org> wrote:
On Sat, 10 Nov 2018, listsb wrote:
i've just noticed that every mail received seems to be hitting the ALL_TRUSTED
test [ALL_TRUSTED=-1], regardless of where the message has come from. i have
the following:
grep -riF 'internal_networks' /etc/spamassassin/*
/etc/spamassassin/99_local-config.cf:internal_networks 198.19.20.50/32
/etc/spamassassin/99_local-config.cf:internal_networks 198.19.20.212/32
here is a set of sample headers, slightly sanitized:
http://dpaste.com/33J7SF5
how can i troubleshoot why this is happening?
thanks!
internal_networks != trusted_networks.
i'm not sure i understand. from the documentation here:
https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Conf.html
it says:
"If trusted_networks is not set and internal_networks is, the value of
internal_networks will be used for this parameter"
Ah, apologies - I wasn't aware of that behavior. I presume you are not
explicitly setting any trusted networks, so while it's conceptually
correct, I withdraw my comment as unhelpful in this case...
additionally, how would absence of either setting result in ALL_TRUSTED getting
matched?
I *think* there's some defaults included (perhaps the local network?) -
I've never focused on that detail before, I've always just set it up for
my environment.
what am i misunderstanding?
Is there some possibility that you're stripping external Received headers?
(grasping at straws here)
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Britain used to be the most powerful empire in the world.
Now they're terrified of pocketknives.
How the mighty have fallen. -- Matt Walsh
-----------------------------------------------------------------------
Today: Veterans Day
