No. Internal only if it's not directly accepting mail from client IPs that you WANT to accept mail from. MXes and everything (internal relays) after them are ALWAYS in both trusted and internal networks.
> > This is what tells SA that mail was sent directly from "questionable > IPs" to your systems. It sees that some (questionable) IP sent mailto > an internal host without going through some external host first.
How can an MX be internal if you say it shouldn't accept mail from client ips who's emails are wanted? Surely the MX is where all clients will have to connect directly to?
Have i misunderstood you? Ben
