OK. I added the internal_networks setting listing my only MX (It's not trusted, as it's used by many other users, and isn't under my control.)
<snip> # Trusted Networks trusted_networks 69.25.118.171 # Internal Networks internal_networks 207.234.226.49 </snip> OK. So the trusted_networks line, specifies my mail server IP.(Machine running SA.) And, internal_networks has my third-party operated MX. Now, regardless of what I set trusted_networks to, SA sets ALL_TRUSTED to direct delivered spam, or mail. I think this is part of it's design though. My mail host is a webmail box, thus nobody relays through it, except itself. Thus, it shouldn't trust any hosts other than itself. Now, it doesn't set ALL_TRUSTED from spam, or any e-mail which is relayed via another host. It's only for direct delivered mail. Thanks, John > On 7/24/05, John T. Yocum <[EMAIL PROTECTED]> wrote: >> Hello, >> >> I've recently noticed that a lot of spam is getting through >> SpamAssassin, >> and it's getting the ALL_TRUSTED test listed on it. The issue with that >> is, I only have one IP trusted, and that's my own mail server. >> >> <snip from local.cf> >> # Trusted Networks >> trusted_networks 69.25.118.171 >> </snip> >> >> As you can see in the below set of headers the message came from >> 218.222.75.209. Yet, it's trusted. >> >> Return-Path: <[EMAIL PROTECTED]> >> Received: from U075209.ppp.dion.ne.jp (U075209.ppp.dion.ne.jp >> [218.222.75.209]) >> by kangaroo.publicmx.com (8.13.4/8.13.4) with ESMTP id >> j6OKabJS014331 >> for <[EMAIL PROTECTED]>; Sun, 24 Jul 2005 13:36:40 -0700 >> From: "Fortifies T. Noon" <[EMAIL PROTECTED]> >> To: Fawyland <[EMAIL PROTECTED]> >> Subject: Petite 18yo Teen Stripping >> Date: Mon, 25 Jul 2005 11:38:57 -0700 >> Message-ID: <[EMAIL PROTECTED]> >> MIME-Version: 1.0 >> Content-Type: text/plain >> Content-Transfer-Encoding: 7bit >> X-Priority: 3 (Normal) >> X-MSMail-Priority: Normal >> X-Mailer: Microsoft Outlook, Build 10.0.4024 >> Importance: Normal >> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 >> X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE: >> 6.20.0.1; VDF: 6.20.0.46; host: U075209.ppp.dion.ne.jp) >> X-Spam-Status: No, score=0.0 required=3.0 >> tests=ALL_TRUSTED,BIZ_TLD,CUM_SHOT, >> HOT_NASTY autolearn=disabled version=3.0.4 >> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on >> kangaroo.publicmx.com >> >> >> I have tried sending a test message from another host to the mail >> server, >> and everything seems fine. As headers show below. >> >> >> Return-Path: <[EMAIL PROTECTED]> >> Received: from mail1.fluidhosting.com (mail1.fluidhosting.com >> [204.14.90.61]) >> by kangaroo.publicmx.com (8.13.4/8.13.4) with SMTP id j6OLZSOU019710 >> for <[EMAIL PROTECTED]>; Sun, 24 Jul 2005 14:35:28 -0700 >> Received: (qmail 43718 invoked by uid 399); 24 Jul 2005 21:35:24 -0000 >> Received: from localhost (HELO ?192.168.102.220?) >> ([EMAIL PROTECTED]@127.0.0.1) >> by localhost with SMTP; 24 Jul 2005 21:35:24 -0000 >> Message-ID: <[EMAIL PROTECTED]> >> Date: Sun, 24 Jul 2005 14:35:21 -0700 >> From: "John T. Yocum" <REMOVEDfluidhosting.com> >> User-Agent: Mozilla Thunderbird 1.0.6-1.4.1.centos4 (X11/20050721) >> X-Accept-Language: en-us, en >> MIME-Version: 1.0 >> To: [EMAIL PROTECTED] >> Subject: test >> Content-Type: text/plain; charset=ISO-8859-1; format=flowed >> Content-Transfer-Encoding: 7bit >> X-Spam-Status: No, score=-0.0 required=4.0 tests=SPF_HELO_PASS,SPF_PASS >> autolearn=disabled version=3.0.4 >> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on >> kangaroo.publicmx.com >> >> >> My current setup is, SpamAssassin 3.0.4 integrated with Sendmail using >> SpamAssasin-Milter 0.3. >> >> Any ideas why other hosts getting trusted, would be greatly appreciated. >> >> Thanks, >> John >> > > John, there's another setting, called "internal networks", that you're > suppose to put in the local.cf file as well. > > See this: > http://wiki.apache.org/spamassassin/TrustPath?highlight=%28all_trusted%29 > > -RoNNY > >
