In the Admin UI (Configuration > Servers > MTA) "MTA Trusted Networks" (Attribute Name zimbraMTAMyNetworks - value of postfix mynetworks) is set to
Code: Select all
127.0.0.0/8 10.9.9.0/24 173.220.228.19/32 173.220.228.20/32 173.220.228.21/32 173.220.228.22/32
Code: Select all
/opt/zimbra/data/spamassassin/localrules/salocal.cf
Code: Select all
trusted_networks 127.0.0.0/8 10.9.9.0/24 173.220.228.19/32 173.220.228.20/32 173.220.228.21/32 173.220.228.22/32
However headers from this sample email (I've redacted client-identifying details) one can see that the email comes from 173.220.228.20 (see the last line) and is obviously getting spam scanned:
X-Spam-Flag: YES
X-Spam-Score: 9.11
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.11 required=9 tests=[ALL_TRUSTED=-1,
BAYES_00=-1.9, DMARC_FAIL_REJECT=9, HTML_MESSAGE=0.001,
MANY_SPAN_IN_TEXT=2.999, T_OBFU_PDF_ATTACH=0.01]
autolearn=no autolearn_force=no
Received: from *****REDACTED***** ([127.0.0.1])
by localhost (*****REDACTED***** [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id V2W5qg6WO8GX; Thu, 8 Mar 2018 17:47:23 +0000 (UTC)
Received: from localhost (localhost.localdomain [127.0.0.1])
by *****REDACTED***** (Postfix) with ESMTP id 26BFA1AE3630;
Thu, 8 Mar 2018 17:47:23 +0000 (UTC)
X-Virus-Scanned: amavisd-new at *****REDACTED*****
Received: from *****REDACTED***** ([127.0.0.1])
by localhost (*****REDACTED***** [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id cmFBlIdin5Pi; Thu, 8 Mar 2018 17:47:22 +0000 (UTC)
Received: from *****REDACTED***** (*****REDACTED***** [173.220.228.20])
by *****REDACTED***** (Postfix) with ESMTP id 8BE511AE3628
for <*****REDACTED*****>; Thu, 8 Mar 2018 17:47:19 +0000 (UTC)
Clearly I'm missing something, where's the inconsistency?