<br><br><div class="gmail_quote">On Tue, Jun 9, 2009 at 1:01 PM, Devon Harding <span dir="ltr"><<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<br><br><div class="gmail_quote"><div class="im">On Tue, Jun 9, 2009 at 11:20 AM, Steve Freegard <span dir="ltr"><<a href="mailto:steve.freegard@fsl.com" target="_blank">steve.freegard@fsl.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div></div><div>Devon Harding wrote:<br>
> Ok, here's my dilemma. My ISP has blocked port 25 on my connection, so<br>
> I'm forced to have my DNS provider (EasyDNS) redirect all my email to<br>
> port 2525. This works fine, the only problem now is I'm seeing an<br>
> influx of SPAM which I believe is because MailScanner is seeing EasyDNS<br>
> as a safe sender & not processing any rules based on IP Address. How do<br>
> I get MailScanner disregard the IP address from EasyDNS and process the<br>
> next hop? I guess something like X-Forwarded-For for SMTP.<br>
<br>
</div></div>>From the changlog of the latest 4.77 release:<br>
<br>
"Read IP Address From Received Header" has been extended, so it will now<br>
take a number instead of yes or no. "yes"=1 and "no"=0. If it is set to<br>
"yes" or a number, then the SMTP client IP address is taken from the<br>
"Received:" header. For example, setting it to 2 will cause the IP<br>
address to be taken from the 2nd Received: header.<br>
<br>
That should do what you need. You'll also need to set SA's<br>
trusted_networks otherwise it will be less accurate when it does network<br>
checks.<br>
<br>
Cheers,<br>
<font color="#888888">Steve.<br>
</font><div><div></div><div>--<br>
</div></div></blockquote><div><br></div></div><div>Steve, that is EXACTLY what I'm looking for. I'll test it out and post the results.</div><div><br></div><div>Thanks,</div><div><br></div><font color="#888888"><div>
-Devon </div></font></div>
</blockquote></div><div><br></div>Ok, this seems to be getting the correct IP after setting it to 2 (A little less SPAM now). What I'm noticing though is that setting doesn't seem to apply to the "RCVD_IN_DNSWL_LOW" rule, which has a score of -1. Do I have to make a change in SA? Where is the setting for trusted_networks in SA? <div>
<br></div><div>-Devon<br><div><br></div><div><br></div></div>