Trust Spam headers from another MTA?

[hewbert007]

Hi,

I've got ZCS 6.0.13_GA_2918 setup as a primary mail system, with an additional backup server (not running Zimbra) defined by an MX record.

The secondary MTA (postfix) has spamassassin and other filtering setup and relays to the Zimbra server.

Unfortunately, mail that the secondary MTA marks as spam is not considered spam by Zimbra.

I've got the secondary MTA in "trusted_networks" and "internal_networks" in salocal.cf.in.

Any insight on how I can go about telling the Zimbra server that mail marked as spam by the other MTA *is* spam, and to trust its headers (e.g. X-Spam-Flag)?

Thanks in advance.

[phoenix]

Originally Posted by hewbert007

I've got the secondary MTA in "trusted_networks" and "internal_networks" in salocal.cf.in.

Why?

[QUOTE=hewbert007;220674]Any insight on how I can go about telling the Zimbra server that mail marked as spam by the other MTA *is* spam, and to trust its headers (e.g. X-Spam-Flag)?/QUOTE]Why doesn't the server that's marking this mail as spam deal with it itself? You're merely wasting processing by passing a 'known' spam message to another server.

[hewbert007]

Originally Posted by phoenix

Why?

Originally Posted by hewbert007

Any insight on how I can go about telling the Zimbra server that mail marked as spam by the other MTA *is* spam, and to trust its headers (e.g. X-Spam-Flag)?/QUOTE]Why doesn't the server that's marking this mail as spam deal with it itself? You're merely wasting processing by passing a 'known' spam message to another server.

I wasn't completely sure of these options, but that's what I got from the docs here:
Mail::SpamAssassin::Conf - SpamAssassin configuration file

trusted_networks:
MXes for your domain(s) and internal relays should also be specified using the internal_networks setting. When there are 'trusted' hosts that are not MXes or internal relays for your domain(s) they should only be specified in trusted_networks.

internal_networks:
What networks or hosts are 'internal' in your setup. Internal means that relay hosts on these networks are considered to be MXes for your domain(s), or internal relays.
...
Every entry in internal_networks must appear in trusted_networks; in other words, internal_networks is always a subset of the trusted set.

Is that what you were asking?