Whitelisted

[Kris Zabriskie]

Matt,
Thank you for the reply.  I have just looked at my MailScanner.conf file
again, and I do not see anything in there, that would allow for these
messages to be whitelisted.  The only thing I can think of, is if the
spammers were forging the e-mail envelop address as something that I have
whitelisted (only 3 domains).  However, that would be apparent in the
mail.log for sendmail, and that is not appearing to be the case at all.  I
am absolutely clueless about why these are being whitelisted.  I will post
mailscanner.conf and spam.whitelist.rules if that would help at all, but I
don't want to clutter the mailing list if that isn't going to help.  Thanks
again for your help!



----- Original Message -----
From: "Matt Kettler" <mkettler at EVI-INC.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, July 22, 2003 12:15 PM
Subject: Re: Whitelisted


> At 10:19 AM 7/22/2003 -0400, Kris Zabriskie wrote:
> >I know this has come up several times on the MailScanner mailing list,
but I
> >have not seen a clear cut answer on why this happends and I know several
> >people are having the same problem.  Our spam has gone through the roof
> >recently.  A good portion of it is spam, that SpamAssassin has identified
as
> >spam, but in the header it says "not spam (whitelisted)".  OK.  Obviously
> >somewhere it says, that this e-mail address is ok.  So I continue to look
> >around.  No mentionment of the address in spam.whitelist.rules for
> >mailscanner.  So it must be SA!  I go over to 60_whitelist.conf.  The
> >address is not in there, in fact I delete all of the addresses.  I then,
> >jump over to the MailScanner conf, and take a look in there to make sure
I
> >am not using SA for whitelisting.  In the MailScanner conf it says:
> >SpamAssassin Auto Whitelist = no
>
> The "not spam (whitelisted)" is a MailScanner whitelisting, not a
> SpamAssassin whitelisting. Check your mailscanner config.
>
> SA will indicate whitelists by rules that modify the score, and not any
> other way.
>