From: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]>
jdow wrote:
From: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]>
Bart Schaefer wrote:
On 6/29/06, Daryl C. W. O'Shea <[EMAIL PROTECTED]> wrote:
EVERYTHING after an MX MUST be listed as BOTH trusted and internal
networks.
Under what circumstances would one list something as internal but not
trusted?
NEVER. Newer versions of SA won't even allow you to make that
misconfiguration.
Gawd I hope not.
Well I hope so. It's the only way that (a) makes sense and (b) works right.
Note that we're talking about internal networks always being trusted,
not that trusted networks are always internal.
OK, I had read your comments to mean that they were going to be forced
to be the same thing. Thanks for the clarigication.
The Earthlink mail servers are ABSODAMNLUTELY not part
of my internal network. But if I do not list them with trusted networks
I visit the land of ALL_TRUSTED.
I'm assuming you're still using 3.0.x which has a number of flaws when
trusted != internal networks.
Have you worked around the FetchMail situation? Until I trusted the
server to which Fetchmail connected I was up ALL_TRUSTED creek.
Whenever you move to 3.1 or 3.2 you'll see that the appropriate
Earthlink hosts should indeed by listed as part of your internal network
and not just your trusted network.
But they are NOT my internal network. As I see it the internal network
can be effectively skipped for spam scanning. When [EMAIL PROTECTED] sends
email to [EMAIL PROTECTED] other controls on spamming exist - such as turning
around in my chair and issueing a verbal tongue lashing or at least a
"Why?" with arched eyebrows. When someone uses Earthlink's servers,
which I am probably over-trusting, I do not want any shortcuts taken.
But I do trust it not to lie about its headers. So I see distinct
needs for internal_networks and trusted_networks. Perhaps I had rashly
presumed that a small real estate office that had people sending each
other email would find SA treating it differently than mail coming in
via a fetchmail process Earthlink's business account email handlers.
If not I sense an enhancement request coming.
{^_^}
