Mailing List Archive: SpamAssassin: users

Trusted_networks not working, raddr is always 127.0.0.1

Index | Next | Previous | View Threaded

a.tesio at nexfi

Mar 12, 2012, 5:26 AM

Post #1 of 5 (341 views)
Permalink

Trusted_networks not working, raddr is always 127.0.0.1

Hi,

I'm using spamassassin 3.2.5 with Exim at smtp time on Debian.

I'm trying to whitelist a single IP and set trusted_networks to this IP in
local.cf

It's not working, whereas other settings in this file are handled correctly.

In the logs, I see that all logs have "raddr=127.0.0.1", for example:

Mar 11 15:54:17 www spamd[8857]: spamd: result: Y 24 -
FS_REPLICA,FS_REPLICAWATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_DYNAMIC,TVD_RCVD_IP,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL
scantime=2.3,size=1551,user=nobody,uid=1027,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42987,mid=<003547517.35014179379598 [at] atlanticbb>,autolearn=disabled

Any idea why spamassassin does not get the sender ip ?

Thanks

#grep "spamd: result:.*raddr=" mail.log | sed "s/.*\(raddr=[^,]*\),.*/\1/" |
uniq -c
1143 raddr=127.0.0.1

#dpkg -al | egrep "^ii.*(spam|exim)"
ii exim4-base 4.69-9+lenny4 support
files for all Exim MTA (v4) packages
ii exim4-config 4.69-9+lenny4
configuration for the Exim MTA (v4)
ii exim4-daemon-heavy 4.69-9+lenny4 Exim MTA
(v4) daemon with extended features, including exiscan
ii exim4-doc-html 4.69-1
documentation for the Exim MTA (v4) in html format
ii exim4-doc-info 4.69-1
documentation for the Exim MTA (v4) in info format
ii eximon4 4.69-9+lenny4 monitor
application for the Exim MTA (v4) (X11 interface)
ii sa-exim 4.2.1-11 Use
spamAssassin at SMTP time with the Exim v4 MTA
ii spamassassin 3.2.5-2+lenny3
Perl-based spam filter using text analysis
ii spamc 3.2.5-2+lenny3 Client
for SpamAssassin spam filtering daemon

--
View this message in context: http://old.nabble.com/Trusted_networks-not-working%2C-raddr-is-always-127.0.0.1-tp33486082p33486082.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

uhlar at fantomas

Mar 12, 2012, 5:34 AM

Post #2 of 5 (324 views)
Permalink

Re: Trusted_networks not working, raddr is always 127.0.0.1 [In reply to]

On 12.03.12 05:26, Alain Tesio wrote:
>I'm using spamassassin 3.2.5 with Exim at smtp time on Debian.

old SA on apparently outdated, unsupported debian.

>I'm trying to whitelist a single IP and set trusted_networks to this IP in
>local.cf
>
>It's not working, whereas other settings in this file are handled correctly.
>
>In the logs, I see that all logs have "raddr=127.0.0.1", for example:
>
>Mar 11 15:54:17 www spamd[8857]: spamd: result: Y 24 -
>FS_REPLICA,FS_REPLICAWATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_DYNAMIC,TVD_RCVD_IP,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL
>scantime=2.3,size=1551,user=nobody,uid=1027,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42987,mid=<003547517.35014179379598 [at] atlanticbb>,autolearn=disabled
>
>Any idea why spamassassin does not get the sender ip ?

this is report on connection to spamd made from localhost. it has
nothing to do with trusted_networks option.

complete mail headers and trusted_networks (and interna_networks)
setting would help much more about the issue.

However try first reading http://wiki.apache.org/spamassassin/TrustPath
to see wich hosts to include and not to include into trusted and
internal networks list.
--
Matus UHLAR - fantomas, uhlar [at] fantomas ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95 beta test site.

rwmaillists at googlemail

Mar 12, 2012, 5:55 AM

Post #3 of 5 (331 views)
Permalink

Re: Trusted_networks not working, raddr is always 127.0.0.1 [In reply to]

On Mon, 12 Mar 2012 05:26:01 -0700 (PDT)
Alain Tesio wrote:

>
> Hi,
>
> I'm using spamassassin 3.2.5 with Exim at smtp time on Debian.
>
> I'm trying to whitelist a single IP and set trusted_networks to this
> IP in local.cf

That's not the same whitelisting. If you actually want to whitelist
read the docs.

> It's not working, whereas other settings in this file are handled
> correctly.
>
> In the logs, I see that all logs have "raddr=127.0.0.1", for example:

raddr is the address from which spamc is connecting.

> Mar 11 15:54:17 www spamd[8857]: spamd: result: Y 24 -
> FS_REPLICA,FS_REPLICAWATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_DYNAMIC,TVD_RCVD_IP,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL
> scantime=2.3,size=1551,user=nobody,uid=1027,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42987,mid=<003547517.35014179379598 [at] atlanticbb>,autolearn=disabled
>
> Any idea why spamassassin does not get the sender ip ?

Clearly it is, or it wouldn't hit all those blocklists.
Did you remember to restart spamd?

a.tesio at nexfi

Mar 12, 2012, 12:44 PM

Post #4 of 5 (316 views)
Permalink

Re: Trusted_networks not working, raddr is always 127.0.0.1 [In reply to]

Thanks for your help,

> > Hi,
> >
> > I'm using spamassassin 3.2.5 with Exim at smtp time on Debian.
> >
> > I'm trying to whitelist a single IP and set trusted_networks to this
> > IP in local.cf
>
> That's not the same whitelisting. If you actually want to whitelist
> read the docs.

This comment in local.cf sounds like it's ok for whitelisting however:

# Set which networks or hosts are considered 'trusted' by your mail
# server (i.e. not spammers)

I read the doc and indeed whitelist_from_rcvd works fine !

--
View this message in context: http://old.nabble.com/Trusted_networks-not-working%2C-raddr-is-always-127.0.0.1-tp33486082p33489540.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

rwmaillists at googlemail

Mar 12, 2012, 1:50 PM

Post #5 of 5 (316 views)
Permalink

Re: Trusted_networks not working, raddr is always 127.0.0.1 [In reply to]

On Mon, 12 Mar 2012 12:44:43 -0700 (PDT)
Alain Tesio wrote:

>
> Thanks for your help,
>
> > > Hi,
> > >
> > > I'm using spamassassin 3.2.5 with Exim at smtp time on Debian.
> > >
> > > I'm trying to whitelist a single IP and set trusted_networks to
> > > this IP in local.cf
> >
> > That's not the same whitelisting. If you actually want to whitelist
> > read the docs.
>
> This comment in local.cf sounds like it's ok for whitelisting however:
>
> # Set which networks or hosts are considered 'trusted' by your mail
> # server (i.e. not spammers)

It's trusted not to fake any headers, or to be a direct source of
spam, so certain tests,such as DNS blocklists, are disabled, but most
still run.

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads