SPF SOFTFAIL not working properly

[Matt Kettler]

Jim Hermann wrote:
>  
> Is anyone else seeing incorrect SPF_SOFTMAIL false positives?

>From the looks of it, you have a broken trust path. SA is deciding that
host.uuserver.net is a part of your network, not an outside server.


Usually this happens if xxxx.org is a mailserver that has a non-routable IP (ie:
10.*, 192.168.*, etc) and is static-map natted by an upstream router.

To fix it you need to declare trusted_networks manually in your local.cf.

see http://wiki.apache.org/spamassassin/TrustPath

Note: this will also fix ALL_TRUSTED matching spam messages (which should never
happen) as well as FPs on dialup RBLs.