> In your case, you're sending from a dynamic IP which is not in your
> trusted networks list. SA thinks "ok, a mailserver in my network
> (condor) just got a connection from somewhere OUTSIDE my network, let's
> check the connecting IP (217.233.34.182) against the dialup RBLS, let's
> check all other IPs beyond that against other RBLs, and see what gets hit."
>
> In my case, when receiving a mail, my SA thinks "ok, mx(n).2z.net
> received a mail from outside my network (lyta.akte.de), let's check that
> IP to see if it's in any dialup RBLS, and let's check all the other IPs
> against the regular RBLs".
>
> Does that help make it more clear?
Okay, so basically SA is testing the first IP outside the trusted network
against the dialup RBLs and every other IP beyond that only against other
RBLs. Did I understand you correctly?
If so I'll have serious problems with my own users who send mails to my
servers using authenticated SMTP. But you mentioned that yourself. I'll
just hope for the next SA version then. :-)
> In the mean time, if you tend to be at the same ISP your options are to
> either use that ISP's outbound SMTP server, or add that ISP's IP range to
> trusted_networks.
Adding the IP range would work for me (although I'd never do it, T-Online
is just too big of an ISP), but not for my other users who are connecting
from the whole range of German ISPs.
> internal_networks: List the IP ranges of your MX servers.
I've never seen that config option.
Is that from a newer version than 2.63?
> Running spamassassin -D, and looking closely at the debug output will
> help show what it considers local, and what it's looking up in RBLs.
Yep, I think I finally understood it now.
Thanks again,
Andy.
--
o _ _ _
------- __o __o /\_ _ \\o (_)\__/o (_) -o)
----- _`\<,_ _`\<,_ _>(_) (_)/<_ \_| \ _|/' \/ /\\
---- (_)/ (_) (_)/ (_) (_) (_) (_) (_)' _\o_ _\_v
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
No matter how long or how hard you shop for an item,
after you've bought it, it will be on sale somewhere cheaper.
