List Info

Thread: Trusted network




Trusted network
user name
2007-07-25 10:04:58
Hi all,

There is a point i don't understand in the configuration of
amavis: When I
send a spam (voluntarily) from my local network to my local
network, the
mail is detected as a Spam. But I add my local network to
this option of
amavisd.conf:

mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10
[FEC0::]/10
                   10.0.0.0/8 172.16.0.0/12 192.168.30.0/24
);

I just add 192.168.30.0/24 and I send my mail from a
computer with the
following address: 192.168.30.57. So what's the problem?
Isn't my local
network considered like a trusted network? Isn't it the good
option?

Thanks
------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Re: Trusted network
country flaguser name
Slovenia
2007-07-25 10:42:41
David,

> There is a point i don't understand in the
configuration of amavis: When I
> send a spam (voluntarily) from my local network to my
local network, the
> mail is detected as a Spam. But I add my local network
to this option of
> amavisd.conf:
>
> mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10
[FEC0::]/10
>                    10.0.0.0/8 172.16.0.0/12
192.168.30.0/24 );
>
> I just add 192.168.30.0/24 and I send my mail from a
computer with the
> following address: 192.168.30.57. So what's the
problem? Isn't my local
> network considered like a trusted network? Isn't it the
good option?

There is no direct relationship between mynetworks in amavisd,
and the concept of trusted/internal/msa networks in
SpamAssassin,
these serve a different purpose (although they are
related).

The mynetworks allows amavisd to differentiate between
mail originating
from inside, from the rest. It allows for triggering policy
banks,
allowing disclaimers to be inserted, and for the Pen Pals
feature to
work as intended. Through policy banks one may then apply
different
settings (like enabling/disabling checks, mail routing) for
mail
originating from inside - what you configure in policy banks
is
entirely up to you.

The SpamAssassin concepts of trusted_networks /
internal_networks / 
msa_networks allow SpamAssassin to recognize which
information in
Received header fields can be relied on, and which not. It
controls
network tests like RBL DUL lookups, SPF, whitelisting based
on received field, etc.

What you configure in mynetworks is not automatically made
available
to SpamAssassin. 

It is common that mynetworks is a union of networks listed
in SpamAssassin internal_networks and msa_networks.

  Mark

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )