MTA trusted networks question

[goran]

I have few networks in my "MTA trusted network" rule but still some mail from clients originating from those networks will occasionally get tagged as spam. There is only one domain on the server.

Shouldn't they be trusted and not evaluated for spam?

[bdial]

i'm not sure this setting applies for antispam. It's purpose is to define networks that can relay mail through the server without needing to authenticate.

[goran]

Is there a way to set rule in SA to white list anything coming from local network (172.16.1.0/24 10.65.5.0/24)?

[uxbod]

Check in /opt/zimbra/conf/salocal.cf as trusted_networks should have already been defined for you ?

[goran]

Originally Posted by uxbod

Check in /opt/zimbra/conf/salocal.cf as trusted_networks should have already been defined for you ?

It's commented

# trusted_networks 212.17.35.

what format it should be if I have more than one network? Will this line work

trusted_networks 172.16.1. 10.65.5.

[uxbod]

That will work ... What I would do though is to create a file under /opt/zimbra/conf/spamassassin/<company>.cf and make the change in there. That way it will not get wiped out on a upgrade; and you can make your own adjustments without altering the ZCS vanilla install eg. pointing Bayes at a central store.

[goran]

should i modify salocal.cf.in or salocal.cf? ... and should I include 127.0.0.1 and my Zimbra server local ip (192.168.1.241)?

[uxbod]

If you wish the change to be persistent it should be made to the .in file. I believe you will just need to add the ranges for your local networks. I am very surprised they are not in salocal.cf as within the .in file already it specifies

%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%%

[styelz]

Also, you may want to increase the negative score to apply for trusted_networks.

You can modify the file /opt/zimbra/conf/spamassassin/50_scores.cf
and change

score ALL_TRUSTED -1.360 -1.440 -1.665 -1.800

to something like..

score ALL_TRUSTED -5.360 -5.440 -5.665 -5.800

Hope that helps. :]