Whitelist not working...

Kevin Miller Kevin_Miller at CI.JUNEAU.AK.US
Mon Jul 7 17:29:33 IST 2003


What address does the whitelist use to permit ham through?

This is a snippet from my whitelist:
/etc/MailScanner/rules/spam.whitelist.rules
        From:           *@alaskaair.com         yes
        FromOrTo:       default                 no

so I should be allowing mail from alaskaair.com through, but it's getting
forwarded to the quarantine account.  Here's the headers from one of them:

============================================================================
===========
Received: from mis-mxg-lnx.ci.juneau.ak.us ([199.58.55.24]) by
city-exch-nts.ci.juneau.ak.us with SMTP (Microsoft Exchange Internet Mail
Service Version 5.5.2653.13)
        id 33XHQDJK; Mon, 7 Jul 2003 07:16:57 -0800
Received: from airemote3.aif1.com (airemote3.aif1.com [208.45.250.253])
        by mis-mxg-lnx.ci.juneau.ak.us (8.12.3/8.12.3/SuSE Linux 0.6) with
SMTP id h67FFrwu020123
        for <someone at ci.juneau.ak.us>; Mon, 7 Jul 2003 07:16:50 -0800
Message-Id: <200307071516.h67FFrwu020123 at mis-mxg-lnx.ci.juneau.ak.us>
Received: from aiappprd1 (localhost) by aiappprd1.adinfonitum.com (LSMTP for
Windows NT v1.1b) with SMTP id <0.00040C88 at aiappprd1.adinfonitum.com>; 6 Jul
2003 20:51:40 -0700
To: someone at ci.juneau.ak.us
From: "alaskaair.com Newsletter" <newsletter at alaskaair.com>
Date: Mon, 07 Jul 2003 08:01:00 -0800
Subject: {Spam?} Fly 3, Get 1 Free and Online Reservations Change
Reply-To: alaskaair at mailserv.directserv.com
Keywords:
JOB_ID=1606|EMAIL_ID=01503413|GUID=17EDCD807EC711D5B66900D0B77540BD
X-JOB_ID: 1606
X-GUID: 17EDCD807EC711D5B66900D0B77540BD
X-PARTY_ID: 00040089
X-EMAIL_ADDRESS_ID: 01503413
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_----=_NextPart_000_001__21409945_61783.93"
X-MailScanner-Information: For more information see www . mailscanner . info
X-CBJ-MailScanner: Found to be clean
X-CBJ-MailScanner-SpamCheck: spam, SpamAssassin (score=7.2, required 5,
        CLICK_BELOW, DEAR_SOMETHING, HTML_40_50, HTML_LINK_CLICK_HERE,
        HTML_WEB_BUGS, MIME_BOUND_NEXTPART, MIME_DEFICIENT_QP,
        MSG_ID_ADDED_BY_MTA_2, NORMAL_HTTP_TO_IP)
X-CBJ-MailScanner-SpamScore: sssssss
============================================================================
===========

The from line says alaskaair.com, but the reply to is
mailserv.directserv.com, and the sending host was actually
aiappprd1.adinfonitum.com (although the sendmail headers indicated it
connected as airemote3.aif1.com) so what domain do I want to whitelist?  I'm
leaning toward airemote3.aif1.com, but am concerned that next month they'll
be routed via airemote2.aif1.com or some other such nonsense.  Can I put an
entry like this in the whitelist:
        From:           *@*.airemote1.com         yes

Other whitelists are working as advertised.

TIA...

...Kevin
-------------------
Kevin Miller                Registered Linux User No: 307357
CBJ MIS Dept.               Network Systems Administrator, Mail
Administrator
155 South Seward Street     ph: (907) 586-0242
Juneau, Alaska 99801        fax: (907 586-4500



More information about the MailScanner mailing list