M. Lewis wrote: > My trusted nework configs: > > # Trusted > clear_trusted_networks > trusted_networks 192.168.1/24 > > # Internal > clear_internal_networks > internal_networks 192.168.1/24 > > Headers from a message where ALL_TRUSTED hit: >
<snip> What's up with all those "Delivered-To:" headers being inserted between Received: headers. I suspect those are confusing SA. Really the best way to tell exactly what's up is to save one of those messages that false-hit ALL_TRUSTED and run it through spamassassin -D. The debug out will, among other things, tell you exactly how SA parsed each Received: header, and if it thinks the hosts in it are trusted or not. > Received: from unknown (HELO 207.96.139.179) (unknown) > by unknown with SMTP; 9 Dec 2005 23:37:06 -0000 That's a pretty scary Received: line. At least two of those unknown's should be known. At absolute minimum the "by" clause should be known... eek.
