On Wed, 31 Aug 2016 14:13:41 -0500 Jason Voorhees wrote: > Hello guys: > > I'm an old spamassassin user but not an experienced one indeed. I have > a Zimbra server and a dedicated antispam with MailScanner like this: > > Zimbra: 192.168.1.25 > Antispam: 192.168.1.5 > > All incoming and outgoing mail traffic goes through my antispam box. > Well, I have already working DNS based checks like "skip_rbl_checks 0" > and/or "RDNS_NONE" working fine for external mail servers. However, I > don't know how to make an exclusion for my internal network > (192.168.1.0/24). > > On my Antispam box this is what I tried to put in > /etc/mail/spamassassin/MailScanner.cf: > > skip_rbl_checks 0 > trusted_networks 127.0.0.1 192.168.1.0/24 > internal_networks 192.168.1.25
Since these are non-public you shouldn't need to define either. I'm assuming here that the strange way you've split the addresses between internal and trusted is simply a mistake rather than something subtle. > I've configured a local named service on my antispam box to make sure > that 192.168.1.5 and 192.168.1.25 have a correct rDNS configuration > (in both directions). I even configured local resolution of those IPs > in /etc/hosts That's shouldn't be needed. > However, I can see that SpamAssassin is still scoring all my outgoing > emails like this: Do you actually mean it's scoring all your outgoing mail, or does this happen when you send yourself emails? We need to see some headers, and preferably from an email that's received by a different mail system. It would also help to know which IP address caused RCVD_IN_BRBL_LASTEXT, e.g. by putting X-Spam-Report on all mail. I'd be surprised if it's actually a private IP address as you've implied.
