On 7/24/05, John T. Yocum <[EMAIL PROTECTED]> wrote: > Hello, > > I've recently noticed that a lot of spam is getting through SpamAssassin, > and it's getting the ALL_TRUSTED test listed on it. The issue with that > is, I only have one IP trusted, and that's my own mail server. > > <snip from local.cf> > # Trusted Networks > trusted_networks 69.25.118.171 > </snip> > > As you can see in the below set of headers the message came from > 218.222.75.209. Yet, it's trusted. > > Return-Path: <[EMAIL PROTECTED]> > Received: from U075209.ppp.dion.ne.jp (U075209.ppp.dion.ne.jp > [218.222.75.209]) > by kangaroo.publicmx.com (8.13.4/8.13.4) with ESMTP id j6OKabJS014331 > for <[EMAIL PROTECTED]>; Sun, 24 Jul 2005 13:36:40 -0700 > From: "Fortifies T. Noon" <[EMAIL PROTECTED]> > To: Fawyland <[EMAIL PROTECTED]> > Subject: Petite 18yo Teen Stripping > Date: Mon, 25 Jul 2005 11:38:57 -0700 > Message-ID: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: text/plain > Content-Transfer-Encoding: 7bit > X-Priority: 3 (Normal) > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook, Build 10.0.4024 > Importance: Normal > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 > X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE: > 6.20.0.1; VDF: 6.20.0.46; host: U075209.ppp.dion.ne.jp) > X-Spam-Status: No, score=0.0 required=3.0 tests=ALL_TRUSTED,BIZ_TLD,CUM_SHOT, > HOT_NASTY autolearn=disabled version=3.0.4 > X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on > kangaroo.publicmx.com > > > I have tried sending a test message from another host to the mail server, > and everything seems fine. As headers show below. > > > Return-Path: <[EMAIL PROTECTED]> > Received: from mail1.fluidhosting.com (mail1.fluidhosting.com [204.14.90.61]) > by kangaroo.publicmx.com (8.13.4/8.13.4) with SMTP id j6OLZSOU019710 > for <[EMAIL PROTECTED]>; Sun, 24 Jul 2005 14:35:28 -0700 > Received: (qmail 43718 invoked by uid 399); 24 Jul 2005 21:35:24 -0000 > Received: from localhost (HELO ?192.168.102.220?) > ([EMAIL PROTECTED]@127.0.0.1) > by localhost with SMTP; 24 Jul 2005 21:35:24 -0000 > Message-ID: <[EMAIL PROTECTED]> > Date: Sun, 24 Jul 2005 14:35:21 -0700 > From: "John T. Yocum" <REMOVEDfluidhosting.com> > User-Agent: Mozilla Thunderbird 1.0.6-1.4.1.centos4 (X11/20050721) > X-Accept-Language: en-us, en > MIME-Version: 1.0 > To: [EMAIL PROTECTED] > Subject: test > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > Content-Transfer-Encoding: 7bit > X-Spam-Status: No, score=-0.0 required=4.0 tests=SPF_HELO_PASS,SPF_PASS > autolearn=disabled version=3.0.4 > X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on > kangaroo.publicmx.com > > > My current setup is, SpamAssassin 3.0.4 integrated with Sendmail using > SpamAssasin-Milter 0.3. > > Any ideas why other hosts getting trusted, would be greatly appreciated. > > Thanks, > John >
John, there's another setting, called "internal networks", that you're suppose to put in the local.cf file as well. See this: http://wiki.apache.org/spamassassin/TrustPath?highlight=%28all_trusted%29 -RoNNY
