message whitelisted
Kris Zabriskie
zabriskw at ITECH.NET
Thu Jun 5 15:43:19 IST 2003
Damian,
I would say maybe 5 times a day for each email account we have. The best
way to find out is just grep your mail.log and it would be able to tell ya.
The envelope addresses that I am getting them from is:
yahoo.com
compaq.net
usa.com
21cn.com
email.com
hotmail.com
yeah.net
eureka.net
I have done reverse DNS lookups off of the mailservers that they are coming
from and they do not resolve to anything, which goes again RFC compliance
for a MailServer. You can try to configure sendmail or whatever you are
using to only accept mail from mail servers that can be reverse lookup
resolved, but that will seriously hinder your ability to receive mail from
lots of different mailservers, because there are a LOT of MailServers that
are NOT RFC compliant. I can't be much more help, I am sorry.
----- Original Message -----
From: "Damian Mendoza" <damian at WORKGROUPSOLUTIONS.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, June 05, 2003 10:36 AM
Subject: Re: message whitelisted
> Kris,
>
> How often does it happen? AWL = no in MailScanner.conf
>
> Thanks,
>
> Damian
>
> Workgroup Solutions
> 20532 El Toro Rd, Suite 107
> Mission Viejo, CA 92692
> 949 586-2200
>
>
>
>
>
> -----Original Message-----
> From: Kris Zabriskie [mailto:zabriskw at ITECH.NET]
> Sent: Thursday, June 05, 2003 7:06 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: message whitelisted
>
>
> Damian,
> I am currently having the same problem and have not been able to fix it.
I
> have been advised to check the spamassassin whitelist database. Check in
> your MailScanner.conf file and look to see if you have:
>
> SpamAssassin Auto Whitelist = no
>
> Past that I am affraid I can not be of any more help to you.
>
>
> ----- Original Message -----
> From: "Damian Mendoza" <damian at WORKGROUPSOLUTIONS.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Thursday, June 05, 2003 9:13 AM
> Subject: message whitelisted
>
>
> > message whitelisted - any idea why?
> >
> >
> > Maillog
> >
> > Jun 4 15:43:51 spamgate sendmail[14232]: h54MhGTP014210:
> to=<morrow at svusd.k12.c
> > a.us>, delay=00:00:34, xdelay=00:00:01, mailer=esmtp, pri=120857,
> relay=[10.1.25
> > 4.3] [10.1.254.3], dsn=2.0.0, stat=Sent (
> <051801c32aea$61855df0$6400a8c0 at cx3429
> > 83a> Queued mail for delivery)
> > Jun 4 15:43:51 spamgate sendmail[14232]: h54MhGTO014210:
> to=<billingsleyc at svusd
> > .k12.ca.us>, delay=00:00:35, xdelay=00:00:00, mailer=esmtp, pri=120860,
> relay=[1
> > 0.1.254.3] [10.1.254.3], dsn=2.0.0, stat=Sent (
> <CPECILEDEAIIAPBICHAGGEIBCBAA.kb
> > rennan at benefitassoc.com> Queued mail for delivery)
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> from=<pharmas23208 at pay
> > nespeople.us>, size=3278, class=0, nrcpts=8,
msgid=<j---nhtbc73udv at a45j6>,
> proto
> > =ESMTP, daemon=MTA, relay=gateway.svusd.k12.ca.us [198.188.250.254]
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<lampij at svusd.k12.c
> > a.us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<kleindienst at svusd.
> > k12.ca.us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<ireyt at svusd.k12.ca
> > .us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<grzecka at svusd.k12.
> > ca.us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<davisp at svusd.k12.c
> > a.us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<collinsc at svusd.k12
> > .ca.us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<cistone at svusd.k12.
> > ca.us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> > Jun 4 15:43:57 spamgate sendmail[14224]: h54MhbTP014224:
> to=<chuw at svusd.k12.ca.
> > us>, delay=00:00:00, mailer=esmtp, pri=240882, stat=queued
> >
> > MailScanner Whitelist
> >
> > # This is where you can build a Spam WhiteList
> > # Addresses matching in here, with the value
> > # "yes" will never be marked as spam.
> > From: 152.78. yes
> > #From: 130.246. yes
> > From: *@cox.net yes
> > From: *.k12.ca.us yes
> > From: *.edu yes
> > From: *.ca.us yes
> > From: *.dell.com yes
> > From: .*universalservice.org yes
> > From: *.nsba.org yes
> > From: *.org yes
> > From: *.gov yes
> > From: .ups.com yes
> > From: .fedex.com yes
> > From: .*techrepublic.com yes
> > From: .*godaddy.com yes
> > From: *.servepath.com yes
> > From: *.nationalcar.com yes
> > From: csuf_tvfilmsociety at yahoogroups.com yes
> > From: info at riskinstitute.org yes
> > From: TechEdNews at TechEdEvents.org yes
> > From: enewsletter at natsem.com yes
> > From: .em10.net yes
> > From: subscriptions at enasco.com yes
> > From: kelly at RIECHESBAIRD.com yes
> > From: K12 at microsoft.com yes
> > From: newsflash at hvm.macromedia.com yes
> > From: Newsletter at schoolfacilities.com yes
> > From: SuePar1130 at aol.com yes
> > From: aesparza at thermaldynamics.com yes
> > From: editor at englishclub.com yes
> > From: delfie.burgueno at ecd.com yes
> > From: jeanie at tstonramp.com yes
> > From: ascd at readexresearch.com yes
> > From: .sirs.com yes
> > From: travel at expedia.com yes
> > From: lebinger at nsba.org yes
> > From: orders at renlearn.com yes
> > From: .e-tips.carolina.com yes
> > From: *@*.afac.org yes
> > From: *@americawest.com yes
> > From: *@tamadvisors.com yes
> > From: *@scholastic.com yes
> > From: *@getthere.net yes
> > From: *@educatorsportal.com yes
> > From: *@boiseoffice.com yes
> > From: *@macfreefilms.com yes
> > From: *@*.usmc.mil yes
> > From: *@class-ic.com yes
> > FromOrTo: sales at goadulted.com yes
> > FromOrTo: trpenna at msn.com yes
> > FromOrTo: default no
> >
> > Jun 4 15:43:58 spamgate MailScanner[6614]: SpamAssassin timed out and
was
> kille
> > d, consecutive failure 4 of 20
> >
> > Microsoft Mail Internet Headers Version 2.0
> > Received: from localhost.localdomain ([192.168.1.86]) by
> w2kserver.workgroupsolutions.com with Microsoft SMTPSVC(5.0.2195.5329);
> > Wed, 4 Jun 2003 15:46:09 -0700
> > Received: from workgroupsolutions.com (gateway.workgroupsolutions.com
> [192.168.1.254])
> > by localhost.localdomain (8.12.5/8.12.5) with ESMTP id
> h54Mk3Ve008589
> > for <damian at workgroupsolutions.com>; Wed, 4 Jun 2003
> 15:46:03 -0700
> > Received: from svusd.k12.ca.us ([66.124.50.2]) by
> gateway.workgroupsolutions.com with ESMTP id <119041>; Wed, 4 Jun 2003
> 15:46:06 -0700
> > Received: from doexchange.svusd.net ([10.1.254.3]) by
> gateway.svusd.k12.ca.us with ESMTP id <119073>; Wed, 4 Jun 2003
> 12:45:52 -1000
> > X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
> > Content-Class: urn:content-classes:message
> > MIME-Version: 1.0
> > Content-Type: multipart/alternative;
> > boundary="----_=_NextPart_001_01C32AEB.0C717225"
> > Disposition-Notification-To: "Chu, Warren (Information Services)"
> <CHUW at svusd.k12.ca.us>
> > Subject: FW: chuw at svusd.k12.ca.us,We have the cheapest Viagra around
> > Date: Wed, 4 Jun 2003 15:45:51 -0700
> > Message-ID:
> <F392BD3869E09947B069C53C9120823F03996DB4 at doexchange.svusd.net>
> > X-MS-Has-Attach:
> > X-MS-TNEF-Correlator:
> > Thread-Topic: chuw at svusd.k12.ca.us,We have the cheapest Viagra around
> > Thread-Index: AcMq6uzSqDpgIY8yQMSl6zd3ISx+RQAAEBgg
> > From: "Chu, Warren (Information Services)" <CHUW at svusd.k12.ca.us>
> > To: <damian at workgroupsolutions.com>
> > X-Message-is-Spam: not spam (whitelisted), SpamAssassin (score=29.7,
> > required 4, BAYES_50, HTML_30_40, HTML_FONT_COLOR_BLUE,
> > HTTP_USERNAME_USED, MAILTO_TO_SPAM_ADDR, NO_COST, REMOVE_PAGE,
> > SUBJ_VIAGRA, Subj_1, USERPASS)
> > Return-Path: CHUW at svusd.k12.ca.us
> > X-OriginalArrivalTime: 04 Jun 2003 22:46:09.0982 (UTC)
> FILETIME=[17B365E0:01C32AEB]
> >
> > ------_=_NextPart_001_01C32AEB.0C717225
> > Content-Type: text/plain;
> > charset="us-ascii"
> > Content-Transfer-Encoding: quoted-printable
> >
> > ------_=_NextPart_001_01C32AEB.0C717225
> > Content-Type: text/html;
> > charset="us-ascii"
> > Content-Transfer-Encoding: quoted-printable
> >
> >
> > ------_=_NextPart_001_01C32AEB.0C717225--
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Workgroup Solutions
> > 20532 El Toro Rd, Suite 107
> > Mission Viejo, CA 92692
> > 949 586-2200
> > Developers of SpamGate -
> > MXTreme - Stop SPAM at the Gateway with the MXTreme Appliance Stop SPAM
> today at the Gateway!
> >
> > PacketShaper - Bandwidth Management for your network
> > Centurion Guard - Write protect your desktop computers
> >
> >
>
>
More information about the MailScanner
mailing list