On 19 Apr 2021, at 13:26, RW wrote:
> On Mon, 19 Apr 2021 13:20:37 -0400
> Bill Cole wrote:
>
>> On 19 Apr 2021, at 13:03, Matus UHLAR - fantomas wrote:
>>
>>>> On 19 Apr 2021, at 11:30, Matus UHLAR - fantomas wrote:
>>>>> I understand this as:
>>>>>
>>>>> if mail was received by internal relay unauthenticated, it's
>>>>> external,
>>>
>>> On 19.04.21 12:49, Bill Cole wrote:
>>>> I cannot make SA behave that way.
>>>
>>> why not?
>>
>> When I provide SA with a message that has stepped through 2 internal
>> machines with no authentication, SA *DOES NOT* insert any information
>> about the relay host in X-Spam-Relays-External.
>
> I'm not 100% sure, but I think localhost, unlike private addresses, is
> always internal/trusted.
I don't think that is relevant to the original message at hand or to
what I'm trying to match, which is the absence of any external relays.
As far as I can tell, it is impossible to make SA mark an internal relay
as external without there being an actual external source.
--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
> On Mon, 19 Apr 2021 13:20:37 -0400
> Bill Cole wrote:
>
>> On 19 Apr 2021, at 13:03, Matus UHLAR - fantomas wrote:
>>
>>>> On 19 Apr 2021, at 11:30, Matus UHLAR - fantomas wrote:
>>>>> I understand this as:
>>>>>
>>>>> if mail was received by internal relay unauthenticated, it's
>>>>> external,
>>>
>>> On 19.04.21 12:49, Bill Cole wrote:
>>>> I cannot make SA behave that way.
>>>
>>> why not?
>>
>> When I provide SA with a message that has stepped through 2 internal
>> machines with no authentication, SA *DOES NOT* insert any information
>> about the relay host in X-Spam-Relays-External.
>
> I'm not 100% sure, but I think localhost, unlike private addresses, is
> always internal/trusted.
I don't think that is relevant to the original message at hand or to
what I'm trying to match, which is the absence of any external relays.
As far as I can tell, it is impossible to make SA mark an internal relay
as external without there being an actual external source.
--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire