Are ALL hotmail address blacklisted ? {Scanned by HJMS}

[Denis Croombs]

Hi

Thanks for that, I have now found the problem, there was an entry
*@*mail.com which was causing the problem.

Thanks for you assistance.

Denis

> Well trial and error debugging is always one possibility - try taking out
> your blacklist entirely (and reloading MS) to see if it makes a
difference.
> If it doesn't, then you know the blacklist is a red herring.
>
> If it does make a difference (which you can apparently test just by
> delivering a message "from hotmail" to yourself), then cut your blacklist
in
> half and test with each half separately.  If you find that neither half
> causes the problem but the list as a whole does, then you've probably
bumped
> into a MS bug.
>
> If you find that one half causes the problem but not the other half, then
> keep cutting things down till you find the offending line.
>
> With the size of your file, that'll be painful but you ought to be able to
> script up parts of it to make it go faster...
>
> -t.
>
>
> > -----Original Message-----
> > From: Denis Croombs [mailto:denis at CROOMBS.ORG]
> > Sent: Saturday, September 13, 2003 1:18 AM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Are ALL hotmail address blacklisted ? {Scanned by HJMS}
> >
> >
> > Thanks for that, no xxxxx at hotmail.com is not the real address
> > & I have tried
> > searching the blacklist for the address & parts of the
> > address, but this is
> > just an example, this now happens on EVERY hotmail account so
> > I have to
> > check all the spam for hotmail e-mails every hour to find
> > these and then
> > whitelist the good ones, I just do not know what to check next.
> > I have even got a new hotmail account for testing & yes even that gets
> > blacklisted.
> >
> > All clues very welcome
> >
> > Denis
> >
> > > Is 'xxxxxx at hotmail.com' the real email address from your
> > log or did you
> > edit
> > > out the real email address?  If you edited it out, how can
> > anyone compare
> > it
> > > to your blacklist?
> > >
> > > I'm assuming you've already searched for the real email
> > address in your
> > > blacklist file...?
> > >
> > > Also, in the blacklist file you attached, you don't seem to
> > have a default
> > > specified.
> > >
> > > The code that converts the second field of white/blacklist
> > rules into a
> > > useful pattern seems to be the RuleToRegexp function within
> > Config.pm.  It
> > > would be nice if there were a quick way to test a given
> > string to see
> > > whether it matches any lines of a given white/blacklist,
> > but that's more
> > > complicated than I thought it would be at first.  Just
> > glancing through
> > > though, I don't notice anything that would match
> > xxxxxx at hotmail.com, if
> > > that's the real address.
> > >
> > > -t.
> > >
> > >
> > > > -----Original Message-----
> > > > From: Denis Croombs [mailto:denis at CROOMBS.ORG]
> > > > Sent: Friday, September 12, 2003 3:30 PM
> > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > Subject: Re: Are ALL hotmail address blacklisted ?
> > {Scanned by HJMS}
> > > >
> > > >
> > > > Hi
> > > > MailScanner V4.23-11
> > > >
> > > > Is Definitely Spam = /etc/MailScanner/rules/blacklist.rules
> > > >
> > > > blacklist file is attached
> > > >
> > > > Thanks
> > > >
> > > > Denis
> > > >
> > > > > And in MailScanner.conf, what have you set "Is
> > Definitely Spam" to?
> > > > >
> > > > > # Spam Blacklist:
> > > > > # Make this point to a ruleset, and anything in that
> > > > ruleset whose value
> > > > > # is "yes" will *always* be marked as spam.
> > > > > # This can also be the filename of a ruleset.
> > > > > Is Definitely Spam = no
> > > > >
> > > > > You also haven't mentioned what version of mailscanner
> > > > you're using, what
> > > > > "your blacklist" contains, etc.
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: Denis Croombs [mailto:denis at CROOMBS.ORG]
> > > > > > Sent: Friday, September 12, 2003 2:27 PM
> > > > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > > > Subject: Re: Are ALL hotmail address blacklisted ?
> > > > {Scanned by HJMS}
> > > > > >
> > > > > >
> > > > > > Thanks here is an example;-
> > > > > >
> > > > > > Sep 12 19:58:15 ns MailScanner[20714]: Message h8CIwDR03176
> > > > > > from 64.4.23.57
> > > > > > (xxxxxx at hotmail.com) to croombs.org is spam (blac
> > > > > > klisted)
> > > > > >
> > > > > > Denis
> > > > > > > Posting the actual log entries in question would be
> > helpful...
> > > > > > >
> > > > > > > > I have already done that, which is why I asked
> > the question,
> > > > > > > > but it states
> > > > > > > > it is blacklisted both in the e-mail header & the
> > maillog but
> > > > > > > > I have not
> > > > > > > > blacklisted any hotmail.com accounts !
> > > > > > > > Thanks
> > > > > > > > Denis
> > > > > > > >
> > > > > > > > > Hi!
> > > > > > > > >
> > > > > > > > > > Are ALL hotmail address blacklisted ?
> > > > > > > > > > Because so far I have had to go through and
> > add a lot of
> > > > > > > > valid hotmail
> > > > > > > > > > accounts to my whitelist as they are being tagged as
> > > > > > > > blacklisted but are
> > > > > > > > NOT
> > > > > > > > > > in my mailscanner blacklist and I do not use the
> > > > spamassassin
> > > > > > > > > > blacklist/whitelist.
> > > > > > > > > > RedHat 7.3, MS 4.22-11 SA 2.55
> > > > > > > > >
> > > > > > > > > Why dont you look in your logs ? Its tells exactly
> > > > why and what.
> > > > > > > > > Turn details on spam logging on ...
> > > > > > > > >
> > > > > > > > > Bye,
> > > > > > > > > Raymond.
> > > > > > > >
> > > > > >
> > > >
> >