Re: [AMaViS-user] all trusted check not working properly?

On Mon, May 16, 2005 at 12:30:21PM -0700, Rich Chiuppi wrote:
> Hello,
>
> I was wondering if there is something specfic that I
> should be configuring within amavis-new 2.2.0
> for the ALL_TRUSTED check in SA 3.0.2?
> We are seeing this check get hit almost every message
> and detracting 2-3 pts for the "successful" passing of
> this check. I have a feeling it has something to do
> with the lack of header information SA is seeing at
> the point of checking. I have disabled this check
> until I can figure this out.
>
> Any thoughts?

This is more of a SA 3+ issue rather than an amavisd issue.

You only get this test activated if you have configured
"internal_networks" and/or "trusted_networks" in SA. Usually you
configure this in local.cf. These values tells SA how much of the
Received header chain to believe. ALL_TRUSTED triggers when the entire
Received header chain contains only addresses in your internal or
trusted list.

If you have accidentally configured it to "trust" 0.0.0.0/0, for
instance, then it will believe that every mailserver in the world is
trustworthy and score messages down accordingly.

Alternatively, if amavisd is getting messages which have had all of
the external Received: headers stripped out (why??) then you would need
to disable this test, and probably a lot of the other RCVD_IN* header
tests as there is nothing outside that it can rely on. (Or change your
network to properly include the Received headers.)

-- Clifton

--
Clifton Royston -- cliftonr@tikitechnologies.com
Tiki Technologies Lead Programmer/Software Architect
"I'm gonna tell my son to grow up pretty as the grass is green
And whip-smart as the English Channel's wide..."
-- 'Whip-Smart', Liz Phair


-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/