SpamAssassin 2.30

Julian Field jkf at
Sat Jun 15 17:59:49 IST 2002

At 17:06 15/06/2002, you wrote:
>Here is another false positive. This time quite
>strange since it is a logwatch message from one of my machines
>just a couple of iptables log entries.

Try the patch I just sent you and see if it improves things.

However, note that message would not have been whitelisted as it really
came from <root at cedric.DMS.UMontreal.CA> and that name doesn't match any of
your whitelist.conf entries. It's the real envelope address (which has been
put in the Return-Path header for your convenience), not anything that
someone/something happened to put in the To header.

>First here is my whitelist.conf
> > cat spam.whitelist.conf
># This is a list of email addresses (with an @ sign in them) or entire email
># domains (without an @ sign in them) from which you will accept mail
># ever marking it as spam.
>#jkf at
>spamassassin-talk at
>Here is the message that I just got.
> From - Sat Jun 15 12:01:33 2002
>X-Mozilla-Status: 0001
>X-Mozilla-Status2: 00000000
>Return-Path: <root at cedric.DMS.UMontreal.CA>^M
>Received: from cedric.DMS.UMontreal.CA (cedric.DMS.UMontreal.CA
>         by euler.DMS.UMontreal.CA (8.11.4/8.11.4) with ESMTP id
>         for <root at euler.DMS.UMontreal.CA>; Sat, 15 Jun 2002 12:00:00
>-0400 (EDT)^M
>Received: (from root at localhost)^M
>         by cedric.DMS.UMontreal.CA (8.11.6/8.11.6) id g5FG00L22843^M
>         for root; Sat, 15 Jun 2002 12:00:00 -0400^M
>Date: Sat, 15 Jun 2002 12:00:00 -0400^M
>From: <root at cedric.DMS.UMontreal.CA>^M
>Message-Id: <200206151600.g5FG00L22843 at cedric.DMS.UMontreal.CA>^M
>To: root at cedric.DMS.UMontreal.CA^M
>Subject: {SPAM?} cedric.DMS.UMontreal.CA 06/15/02:12.00 system check^M
>X-MailScanner: Found to be clean^M
>X-MailScanner-SpamCheck: SpamAssassin (score=0.3, required 8,
>         NO_MX_FOR_FROM, AWL)^M
>Unusual System Events^M
>Jun 15 11:38:43 cedric kernel: PUB_IN DROP 4 IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:08:00:20:d1:f9:7b:08:00 SRC=
>DST= LEN=328 TOS=0x00 PREC=0x00 TTL=1 ID=17664 DF
>PROTO=UDP SPT=48937 DPT=67 LEN=308 ^M
>Jun 15 11:38:46 cedric kernel: PUB_IN DROP 4 IN=eth0 OUT=
>MAC=ff:ff:ff:ff:ff:ff:08:00:20:d1:f9:7b:08:00 SRC=
>DST= LEN=328 TOS=0x00 PREC=0x00 TTL=1 ID=17665 DF
>PROTO=UDP SPT=48937 DPT=67 LEN=308 ^M

Julian Field                Teaching Systems Manager
jkf at         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ

More information about the MailScanner mailing list