Received trace question

[Per olof Ljungmark]

Hi,

It was a while since I did this so I need to refresh my memory a little.

In the following amavisd says 192.168.64.1 is the *first* upsstream
client and the message gets flagged as "spam from local".

--
First upstream SMTP client IP address: [192.168.64.1]:16601 nh1.nethead.se

Received trace: ESMTPSA://[192.168.64.1]:16601 < ESMTP://45.117.5.206 <
  45.117.5.192
--

But 192.168.64.1 is the *last* instance (our MX) really, 45.117.5.192 is
the originating box.

So what am I missing? This is clearly not "spam from laocal".

Thanks,

//per