Michelle Konzack schrieb: > OK, but I have never untrusted <*.debian.org>
This is not about "untrusting". It's about telling SpamAssassin which relays are trustworthy to begin with. Adding these hints greatly improves the accuracy of SpamAssassin. > Is there a way, to les spamassassin look recursive in the Received: > headers? > > I mean, ignoring any domains begining of the top-most (my INBOX), then > the sender from a trusted list (in this case <*.debian.org>) and only > after this, check the next domain/IP. It works on IP addresses, and not on (easy to forge) domain names. All details should be in the Wiki topics on TrustPath and TrustedRelays: http://wiki.apache.org/spamassassin/TrustPath http://wiki.apache.org/spamassassin/TrustedRelays The shortcut answer: If you have an important forwarder (such as the debian.org infrastructure) you should add them to your trusted_networks setting. -- Matthias