You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "M.Lewis" <_S...@cajuninc.com> on 2005/10/22 00:07:43 UTC
trusted_networks
I've seen quite a few messages regarding trusted_networks lately. I have
played around with my setup and still don't think I have it set correctly.
What I have is this:
# Trusted
trusted_networks 127.0.0.1 192.168.1.0/16
My setup is my mail is dragged down via fetchmail from my provider, runs
through Postfix, then Amavisd, then Spamassassin. Yes, I am NAT'd. I do
not have a public IP.
Is my setup of trusted_networks correct? If so, why do I see the
following in I think in every spam message.
-3.3 ALL_TRUSTED Did not pass through any untrusted hosts
Thanks,
Mike
Re: trusted_networks
Posted by jdow <jd...@earthlink.net>.
From: "mouss" <us...@free.fr>
> jdow a écrit :
>
>> Your ISP's mail server is the trusteded server you should use. For me
>> it's Earthlink's servers:
>> trusted_networks 192.168.0/24 127/8 207.217.121/24
>>
> I am not sue this is needed. SA knows about fetchamil, so he only needs to
> let SA trust the header added by fetchmail, which probably uses 127.0.0.1.
> or am I wrong?
Dunno - I found that the version above was required here.
{^_^}
Re: trusted_networks
Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
mouss wrote:
> jdow a écrit :
>
>> Your ISP's mail server is the trusteded server you should use. For me
>> it's Earthlink's servers:
>> trusted_networks 192.168.0/24 127/8 207.217.121/24
>>
> I am not sue this is needed. SA knows about fetchamil, so he only needs
> to let SA trust the header added by fetchmail, which probably uses
> 127.0.0.1.
> or am I wrong?
You are wrong.
Re: trusted_networks
Posted by mouss <us...@free.fr>.
jdow a écrit :
> Your ISP's mail server is the trusteded server you should use. For me
> it's Earthlink's servers:
> trusted_networks 192.168.0/24 127/8 207.217.121/24
>
I am not sue this is needed. SA knows about fetchamil, so he only needs
to let SA trust the header added by fetchmail, which probably uses
127.0.0.1.
or am I wrong?
Re: trusted_networks
Posted by jdow <jd...@earthlink.net>.
That may backfire with email coming from inside your own network.
Not knowing your internal network topology makes it a little awkward
to diagnose.
{^_-}
----- Original Message -----
From: "M.Lewis" <_S...@cajuninc.com>
> Thank Daryl. I have it solved now I believe.
>
> trusted_networks 127.0.0.1 192.168.1.33 64.125.72.2
>
>
> Daryl C. W. O'Shea wrote:
>> M.Lewis wrote:
>>
>>> # Trusted
>>> clear_trusted_networks
>>> trusted_networks 127.0.0.1 192.168.1.0/16 64.125.72.2
>>>
>>> I took a spam from earlier today and run it through spamassassin -D <
>>> spam. Here's something I saw in the output that makes me think I still
>>> have a problem somewhere.
>>>
>>> debug: received-header: relay 192.168.123.205 trusted? yes internal? yes
>>
>>
>> You told it to trust it.... 192.168.1.0/16
>>
>>
Re: trusted_networks
Posted by "M.Lewis" <_S...@cajuninc.com>.
Thank Daryl. I have it solved now I believe.
trusted_networks 127.0.0.1 192.168.1.33 64.125.72.2
Daryl C. W. O'Shea wrote:
> M.Lewis wrote:
>
>> # Trusted
>> clear_trusted_networks
>> trusted_networks 127.0.0.1 192.168.1.0/16 64.125.72.2
>>
>> I took a spam from earlier today and run it through spamassassin -D <
>> spam. Here's something I saw in the output that makes me think I still
>> have a problem somewhere.
>>
>> debug: received-header: relay 192.168.123.205 trusted? yes internal? yes
>
>
> You told it to trust it.... 192.168.1.0/16
>
>
>
Re: trusted_networks
Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
M.Lewis wrote:
> # Trusted
> clear_trusted_networks
> trusted_networks 127.0.0.1 192.168.1.0/16 64.125.72.2
>
> I took a spam from earlier today and run it through spamassassin -D <
> spam. Here's something I saw in the output that makes me think I still
> have a problem somewhere.
>
> debug: received-header: relay 192.168.123.205 trusted? yes internal? yes
You told it to trust it.... 192.168.1.0/16
Re: trusted_networks
Posted by jdow <jd...@earthlink.net>.
It looks like your mail was run through as a forward from inside
your network.
I always strip all markups off and leave the message as SpamAssassin
would see it fresh out of procmail (amavisd in your case). That way
nothing thinks it came from an internal address.
I test "eml" with "spamc <eml". You'd want to use "spamassassin <eml"
or even "spamassassin -t <eml" to give you the recap at the end. The
-D option can go in there, too, for the spamassassin version. It's
unfortunate spamc does not understand a -D.
{^_^}
----- Original Message -----
From: "M.Lewis" <_S...@cajuninc.com>
> Thanks jdow & Jon. I was unaware of the 'clear_trusted_networks'. I have
> added it now (and restarted mail):
>
> # Trusted
> clear_trusted_networks
> trusted_networks 127.0.0.1 192.168.1.0/16 64.125.72.2
>
> I took a spam from earlier today and run it through spamassassin -D <
> spam. Here's something I saw in the output that makes me think I still
> have a problem somewhere.
>
> debug: received-header: relay 192.168.123.205 trusted? yes internal? yes
>
>
> jdow wrote:
>> From: "M.Lewis" <_S...@cajuninc.com>
>>
>>> I've seen quite a few messages regarding trusted_networks lately. I
>>> have played around with my setup and still don't think I have it set
>>> correctly.
>>>
>>> What I have is this:
>>>
>>> # Trusted
>>> trusted_networks 127.0.0.1 192.168.1.0/16
>>>
>>> My setup is my mail is dragged down via fetchmail from my provider,
>>> runs through Postfix, then Amavisd, then Spamassassin. Yes, I am
>>> NAT'd. I do not have a public IP.
>>>
>>> Is my setup of trusted_networks correct? If so, why do I see the
>>> following in I think in every spam message.
>>>
>>> -3.3 ALL_TRUSTED Did not pass through any untrusted hosts
>>
>>
>> Your ISP's mail server is the trusteded server you should use. For me
>> it's Earthlink's servers:
>> trusted_networks 192.168.0/24 127/8 207.217.121/24
>>
>> {^_^}
>>
>>
>>
Re: trusted_networks
Posted by "M.Lewis" <_S...@cajuninc.com>.
Thanks jdow & Jon. I was unaware of the 'clear_trusted_networks'. I have
added it now (and restarted mail):
# Trusted
clear_trusted_networks
trusted_networks 127.0.0.1 192.168.1.0/16 64.125.72.2
I took a spam from earlier today and run it through spamassassin -D <
spam. Here's something I saw in the output that makes me think I still
have a problem somewhere.
debug: received-header: relay 192.168.123.205 trusted? yes internal? yes
jdow wrote:
> From: "M.Lewis" <_S...@cajuninc.com>
>
>> I've seen quite a few messages regarding trusted_networks lately. I
>> have played around with my setup and still don't think I have it set
>> correctly.
>>
>> What I have is this:
>>
>> # Trusted
>> trusted_networks 127.0.0.1 192.168.1.0/16
>>
>> My setup is my mail is dragged down via fetchmail from my provider,
>> runs through Postfix, then Amavisd, then Spamassassin. Yes, I am
>> NAT'd. I do not have a public IP.
>>
>> Is my setup of trusted_networks correct? If so, why do I see the
>> following in I think in every spam message.
>>
>> -3.3 ALL_TRUSTED Did not pass through any untrusted hosts
>
>
> Your ISP's mail server is the trusteded server you should use. For me
> it's Earthlink's servers:
> trusted_networks 192.168.0/24 127/8 207.217.121/24
>
> {^_^}
>
>
>
Re: trusted_networks
Posted by jdow <jd...@earthlink.net>.
From: "M.Lewis" <_S...@cajuninc.com>
> I've seen quite a few messages regarding trusted_networks lately. I have
> played around with my setup and still don't think I have it set correctly.
>
> What I have is this:
>
> # Trusted
> trusted_networks 127.0.0.1 192.168.1.0/16
>
> My setup is my mail is dragged down via fetchmail from my provider, runs
> through Postfix, then Amavisd, then Spamassassin. Yes, I am NAT'd. I do
> not have a public IP.
>
> Is my setup of trusted_networks correct? If so, why do I see the following
> in I think in every spam message.
>
> -3.3 ALL_TRUSTED Did not pass through any untrusted hosts
Your ISP's mail server is the trusteded server you should use. For me
it's Earthlink's servers:
trusted_networks 192.168.0/24 127/8 207.217.121/24
{^_^}
Re: trusted_networks
Posted by jdow <jd...@earthlink.net>.
From: "Jon Kvebaek" <jk...@klanen.no>
> "M.Lewis" <_S...@cajuninc.com> writes:
>
>> I've seen quite a few messages regarding trusted_networks lately. I have
>> played around with my setup and still don't think I have it set
>> correctly.
>>
>> What I have is this:
>>
>> # Trusted
>> trusted_networks 127.0.0.1 192.168.1.0/16
>>
>> My setup is my mail is dragged down via fetchmail from my provider,
>> runs through Postfix, then Amavisd, then Spamassassin. Yes, I am
>> NAT'd. I do not have a public IP.
>>
>> Is my setup of trusted_networks correct? If so, why do I see the
>> following in I think in every spam message.
>>
>> -3.3 ALL_TRUSTED Did not pass through any untrusted hosts
>
> Hmm. Did you put clear_all_trusted before that?
clear_trusted_networks
He has trusted_networks set wrong, too.
{^_^}
Re: trusted_networks
Posted by Jon Kvebaek <jk...@klanen.no>.
"M.Lewis" <_S...@cajuninc.com> writes:
> I've seen quite a few messages regarding trusted_networks lately. I have
> played around with my setup and still don't think I have it set correctly.
>
> What I have is this:
>
> # Trusted
> trusted_networks 127.0.0.1 192.168.1.0/16
>
> My setup is my mail is dragged down via fetchmail from my provider,
> runs through Postfix, then Amavisd, then Spamassassin. Yes, I am
> NAT'd. I do not have a public IP.
>
> Is my setup of trusted_networks correct? If so, why do I see the
> following in I think in every spam message.
>
> -3.3 ALL_TRUSTED Did not pass through any untrusted hosts
Hmm. Did you put clear_all_trusted before that?
(See
http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Conf.html#item_clear_trusted_networks)
AndI have just received mail that makes spamassassin do this in debug
mode:
debug: received-header: unknown format: from 15.65.160.36 for EQR.44.k..[snip]
try spamassassin -D on one of your and see what it says.
--
Jon Kvebaek <jk...@klanen.no>
Mobil: +47 992 19 829
Unanimiter et constanter Oslo