whitelisted question

[Damian Mendoza]

Kevin,

I did take out all references over the last month in the MailScanner whitelist to the domain - svusd.k12.ca.us, ca.us, etc.

chuw at svusd.k12.ca.us is one of my users - They spoofed the Return-Path.

I only filter messages incoming to the svusd.k12.ca.us domain. I'm sure this is happening to more users, I'm just not being told about it. 

How do I find the senders address that it could be using?

I'll keep checking the "whitelist"


Regards,

Damian

-----Original Message-----
From: Spicer, Kevin [mailto:Kevin.Spicer at BMRB.CO.UK]
Sent: Tuesday, June 24, 2003 9:03 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: whitelisted question


Damian Mendoza wrote:
> Hi,
> 
> I keep receiving these types of messages (whitelisted) which
> are bypassing MailScanner from tagging a message as SPAM. Is
> this coming from SpamAssassin or MailScanner?
> 
> -Message-is-Spam: not spam (whitelisted), SpamAssassin (score=12.9,
>         required 4, BAYES_50, CLICK_BELOW, COMPLETELY_FREE,
>         CONSOLIDATE_DEBT, EXCUSE_14, HTML_60_70, HTML_FONT_BIG,
>         HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GREEN,
>         HTML_FONT_COLOR_UNSAFE, HTML_LINK_CLICK_HERE,
>         HTML_TABLE_THICK_BORDER, HTML_TAG_EXISTS_TBODY,
> MORTGAGE_BEST, OFFER, THE_BEST_RATE) Return-Path: chuw at svusd.k12.ca.us
> 
> Any ideas?
> 
Thats being whitelisted by MailScanner, maybe the spambot gave the senders address as one in your whitelist?  (note thats the envelope sender not the From header).  If you haven't done so already its better to whitelist outgoing mail by IP rather than domain.



BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.