On Sat, Oct 31, 2009 at 03:33:59PM +0000, rich...@buzzhost.co.uk wrote: > > > > Uh, SpamAssassin parses X-Originating-IP and friends just fine. Of course > > PBL isn't going to hit it, since it's an lastexternal rule. > > That has totally escaped me Henrik and I'm not sure I fully understand > it.
There is lots of undocumented black magic in SA. DNSEval.pm defines atleast these headers to be added into end of the "Received chain". X-Yahoo-Post-IP X-Originating-IP X-Apparently-From X-SenderIP So they will be looked in RBLs as necessary. If you don't get the lastexternal part: http://wiki.apache.org/spamassassin/TrustedRelays Also: http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html Selecting just the last external IP By using '-lastexternal' at the end of the set name, you can select only the external host that connected to your internal network, or at least the last external host with a public IP.