On 4/11/2016 12:02 PM, Helmut Schneider wrote:
Bowie Bailey wrote:
On 4/11/2016 10:55 AM, Helmut Schneider wrote:
Hi,
for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without
success.
I have read https://wiki.apache.org/spamassassin/TrustPath and
https://wiki.apache.org/spamassassin/FixingAllTrusted carefully, put
trusted_networks 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
internal_networks 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
add_header all RelaysUntrusted RELAYSUNTRUSTED (this does not seem
to work at all, no header seems added)
into local.cf and still ALL_TRUSTED gets fired. Any help would be
appreciated.
Step one is to make sure you're putting the settings into the right
file. Run this to check if you are using the right file:
$ spamassassin -D config --lint 2>&1 | grep local.cf
Apr 11 11:40:56.509 [6692] dbg: config: read file
/etc/mail/spamassassin/local.cf
Once you have your settings in the right file, then make sure you
have restarted amavisd-new to load the new settings.
mail:~$ spamassassin -D config --lint 2>&1 | grep local.cf
Apr 11 17:54:12.525 [31265] dbg: config: read file
/usr/share/spamassassin/local.cf
Apr 11 17:54:12.526 [31265] dbg: config: read file
/etc/spamassassin/local.cf
mail:~$ grep -iE '(^trusted|internal)' /etc/spamassassin/local.cf
trusted_networks 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
internal_networks 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
mail:~$ grep -iE '(^trusted|internal)' /usr/share/spamassassin/local.cf
mail:~$
Restarted amavisd-new?! I guess I restarted the server more than 20
times within the last 6 months ;)
I just specified that because people frequently don't realize that
amavisd uses SA internally instead of calling spamd. As a result, spamd
is irrelevant and you have to restart amavisd to update the rules.
That being said, I don't know why your setup isn't working. Everything
looks normal to me from what I can see. Amavisd also does not respect
all of SA's settings, but I don't think that is the case with the
trusted_networks, internal_networks, and ALL_TRUSTED. That *IS* why the
add_header entry didn't work. Amavisd adds its own headers and ignores
any header settings from SA.
--
Bowie
