Mark London wrote: > Hi - We are receiving mail from a site that includes the headers: > > Received: from mail1.xxxx.com (mail.xxxx.com [xx.xx.xx.xx]) > by psfcsv1.psfc.mit.edu (8.13.1/8.13.1) with ESMTP id > j9IM7qTG018418 > for <[EMAIL PROTECTED]>; Tue, 18 Oct 2005 18:07:52 -0400 > Received: from adsl-xx-xx-xx-xx.dsl.pltn13.pacbell.net [xx.xx.xx.xx] by > mail1.xxxx.com with SMTP; Tue, 18 Oct 2005 15:36:54 -0600 > > This causes spamassassin to flag it with: > > HELO_DYNAMIC_DHCP HELO_DYNAMIC_HCC HELO_DYNAMIC_IPADDR
1) do you have a trusted_networks setting? If so, does it include "mail1.xxx.com"? If so, are you sure you what to? 2) If you don't have a trusted_networks setting, what would the spamassassin system resolve the IP address of psfcsv1.psfc.mit.edu as? Is it a reserved address (ie: 10.*, 192.168.*, etc) due to split-dns? If it's a reserved address, you must manually declare a trusted_networks setting. You're suffering from a broken trust path caused by the "auto guesser" being confused. See: http://wiki.apache.org/spamassassin/TrustPath