[Spamassassin Wiki] Update of "FixingAllTrusted" by JustinMason

[Apache Wiki <wi...@apache.org>]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Spamassassin Wiki" for change notification.

The following page has been changed by JustinMason:
http://wiki.apache.org/spamassassin/FixingAllTrusted

The comment on the change is:
add page warning about ALL_TRUSTED issues

New page:
= Fixing ALL_TRUSTED errors =

''I'm seeing the rule ALL_TRUSTED firing on spam mails, and giving them negative points.  What should I do?''

First off, do '''not''' simply set the rule's score to 0 to disable it.  This situation is a symptom of a deeper problem, and that's just treating the symptom instead of curing the disease.  While the obvious case of the ALL_TRUSTED misfires will be fixed, there's a whole load of other rules that will still be failing quietly.

What's happening, is that your network setup is too complex for SpamAssassin to correctly infer the edge of your network automatically, and it's getting it wrong.  NAT boxes have a tendency to cause this.  The correct fix is to set {{{trusted_networks}}} as described in TrustPath.

In some cases, your Received header formats may be unparseable by SA, resulting in the ALL_TRUSTED errors persisting after you've set {{{trusted_networks}}}.  In that case, post to the users list with some sample messages to raise the issue, or (if your MTA allows you to change these formats, like qmail) just change your MTA's Received header format to match the de-facto standards in general use.