You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@spamassassin.apache.org by Martin McWhorter <m_...@prairiegroup.com> on 2004/05/10 16:54:04 UTC

NotFirstHop Not working

I am running SA 2.63 on RedHat 9 with the Sendmail milter.

I am having trouble with the notfirsthop not working. Am I wrong in 
thinking that notfirsthop is on by default when the trusted_network is 
properly set up?

Martin

Re: NotFirstHop Not working

Posted by Matt Kettler <mk...@evi-inc.com>.

At 10:54 AM 5/10/2004, Martin McWhorter wrote:
>I am having trouble with the notfirsthop not working. Am I wrong in 
>thinking that notfirsthop is on by default when the trusted_network is 
>properly set up?

Notfirsthop should _always_ be in effect, however be aware that it's name 
is misleading.

notfirsthop does NOT cause the first hop to be ignored, in spite the name.

notfirsthop DOES cause only IPs dropping mail off to trusted hosts to be 
checked.

Of course, if trusted_networks is not correctly determined, SA will wind up 
checking unexpected IP's against dynablock, etc.

Also be aware that this means that if a dialup account drops mail off 
directly to your server, notfirsthop will NOT prevent it from being checked.

You might also want to read:
http://wiki.apache.org/spamassassin/DynablockIssues?action=highlight&value=dynablock