SPF SOFTFAIL not working properly

Matt Kettler mkettler at evi-inc.com
Fri Jun 23 16:01:40 IST 2006

Jim Hermann wrote:
> Is anyone else seeing incorrect SPF_SOFTMAIL false positives?

>From the looks of it, you have a broken trust path. SA is deciding that
host.uuserver.net is a part of your network, not an outside server.

Usually this happens if xxxx.org is a mailserver that has a non-routable IP (ie:
10.*, 192.168.*, etc) and is static-map natted by an upstream router.

To fix it you need to declare trusted_networks manually in your local.cf.

see http://wiki.apache.org/spamassassin/TrustPath

Note: this will also fix ALL_TRUSTED matching spam messages (which should never
happen) as well as FPs on dialup RBLs.

More information about the MailScanner mailing list