RCVD_IN_BSP_TRUSTED

[Jim Coates]

> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> > Of Jim Coates
> > Sent: Monday, October 23, 2006 5:51 PM
> > To: 'MailScanner discussion'
> > Subject: RE: RCVD_IN_BSP_TRUSTED
> >
> >
> > >On 23/10/06, Jim Coates <jimc at laridian.com> wrote:
> > >> > -----Original Message-----
> > >> > From: mailscanner-bounces at lists.mailscanner.info
> > >> [mailto:mailscanner-bounces at lists.mailscanner.info] On
> > Behalf Of Matt Kettler
> > >> > Sent: Monday, October 23, 2006 1:18 PM
> > >> > To: MailScanner discussion
> > >> > Subject: Re: RCVD_IN_BSP_TRUSTED
> > >> >
> > >> > Jim Coates wrote:
> > >> 2) All of the emails I looked at where actually retrieved from a
> > >> common mail server at our ISP via fetchmail to our private mail
> > >> server.  IE - all of those were delivered to a backup mail server,
> > >> then fetched via fetchmail to our primary box.
> > >
> > >And fetchmail (in its blessedly naive way:-):-) will retransmitt
> > >every mail from that "backup MX" as a locally submitted mail. Presto,
> > >there you have it.
> >
> > Yes, the backup mail server is one that is shared among
> > various domains hosted at the rack space where our servers
> > are located, so I really don't have the choice of modifying them.
> >
> > I guess I will take a look at modifying the rules since it
> > seems that everything is working properly, and see what happens.
> >
> > Thanks!
> > Jim
> 
> Forgive me if this isn't helpful -- not completely sure I understand why
you're using fetchmail.
> 
> If your intent in using fetchmail is simply to have all connections from
the public go to the ISP mail server, then you > don't need to use fetchmail
for that.  Just use iptables (or whatever the appropriate firewall is in
your case) to > reject connections on your final mx from everything accept
the ISP mx server, and have the ISP server deliver your mail to > you
"normally" (ie immediately, via smtp initiated by their
> side) instead of whatever you're doing with fetchmail.
> 
> Of course, if your reason for using fetchmail is more esoteric than that,
this doesn't help you one bit and I apologize > for chiming in. :-)
> 
> --
> Trever

Trever -

I'm using fetchmail because they people who run the backup mx server told me
that was they only way they allow me to grab mail from it.

Matt -

My primary MX box does indeed have a public IP address.

I am using an older version of SpamAssassin, which as you just indicated in
another email might be the problem.  I am on SpamAssassin version 3.0.2.

I will check out the DNS resolver issue and perhaps upgrade.

Is it any big deal to upgrade SpamAssassin when it is working with
MailScanner?

Thanks,
Jim