Should I modify spam.whitelist.conf or not?

[Julian Field]

At 08:51 30/07/2002, you wrote:
>Just needs some advise... This is the headers from a message that got marked
>as spam...
>The spam.whitelist.conf contains the word bulkregister.com
>Since I've upgraded mailscanner to 3.22-8, should it be changed
>FROM
>     bulkregister.com
>TO
>     From: bulkregister.com
>
>OR
>Should I add
>     bulkcorp.com
>in the spam.whitelist.conf file?

The Return-Path: is probably the envelope From address (I say "probably"
because you have to remember that any header can be faked). I would add
From:   ns.bulkcorp.com
to the spam.whitelist.conf file.


>------------------------------
>Return-Path: <rnotice at ns.bulkcorp.com>
>Received: from localhost (IDENT:tss at localhost [127.0.0.1])
>  by theargonserver.theargoncompany.com (8.9.3/8.9.3) with ESMTP id KAA16833
>  for <tss at localhost>; Tue, 30 Jul 2002 10:51:34 +0530
>Received: from theargoncompany.com [66.109.239.73]
>  by localhost with POP3 (fetchmail-5.9.0)
>  for tss at localhost (single-drop); Tue, 30 Jul 2002 10:51:34 +0530 (IST)
>Received: from ns.bulkcorp.com (IDENT:root at unassigned.alabanza.com
>[64.176.91.209] (may be forged))
>  by domain.theargoncompany.com (8.10.2/8.10.2) with ESMTP id g6U5Gda19033
>  for <tss at TheArgonCompany.com>; Tue, 30 Jul 2002 10:46:39 +0530
>Received: (from rnotice at localhost)
>  by ns.bulkcorp.com (8.11.6/linuxconf) id g6U4xHO19711
>  for tss at TheArgonCompany.com; Tue, 30 Jul 2002 00:59:17 -0400
>Message-Id: <200207300459.g6U4xHO19711 at ns.bulkcorp.com>
>Subject: {SPAM?} Second Renewal Notice from BulkRegister.com
>From: renewals at bulkregister.com (BulkRegister)
>Date: Tue, 30 Jul 2002 00:59:13 -0400 (EDT)
>Reply-To: renewals at bulkregister.com
>To: tss at TheArgonCompany.com
>X-Mailer: fastmail [version 2.5 PL3]
>X-MailScanner: Found to be clean
>X-MailScanner-SpamCheck: ORDB-RBL, SpamAssassin (score=3.9, required 5,
>  MAY_BE_FORGED, DEAR_SOMEBODY, CALL_FREE, RCVD_IN_RELAYS_ORDB_ORG)
>X-UIDL: (<,"!k"F"!_3A!!RN?!!
>X-Logged: Logged by theargonserver.theargoncompany.com as KAA16833 at Tue
>Jul 30 10:51:34 2002
>Status:
>------------------------------
>
>
>Regards
>
>Rishi Gangoly
>Manager - Technical Operations
>The Argon Company
>Mobile: +91-98205-04274

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ