Hotmail Whitelisted {Scanned}

[technical coordinator]

Please Julian,  Help.  I'm baffled.  Item comes in from a forged hotmail account.  Whitelisted and blacklisted.  Labelled as high scoring spam on subject line and header record.  High scoring spam is set to delete(which works on everything except these items whitelisted).  But Items are forwarded to end user.  But not in any whitelist.

	-----Original Message----- 
	From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK] 
	Sent: Fri 4/16/2004 1:07 PM 
	To: MAILSCANNER at JISCMAIL.AC.UK 
	Cc: 
	Subject: Re: Hotmail Whitelisted {Scanned}
	
	

	Not sure whether this is helpful or not (I haven't read the thread ---- try
	saying that when drunk :-)
	but MailScanner only uses the envelope addresses, not the From: or To: headers.
	
	At 19:02 16/04/2004, you wrote:
	>Well a run a test. First was to blacklist my work email in MS.
	>
	>X-Computer-Medic-MailScanner-Information: Please contact the ISP for more
	>information
	>X-Computer-Medic-MailScanner: Found to be clean
	>X-Computer-Medic-MailScanner-SpamCheck: spam (blacklisted)
	>X-MailScanner-From: dshaw at stbernard.com
	>Status:
	>
	>Looks like MS doesn't pass this to Spamassassin.
	>
	>Second test was to not blacklist in MS but in Spamassassin.
	>
	>X-Computer-Medic-MailScanner-Information: Please contact the ISP for more
	>information
	>X-Computer-Medic-MailScanner: Found to be clean
	>X-Computer-Medic-MailScanner-SpamCheck: spam, SpamAssassin (score=100.5,
	>     required 3.5, SPAM_PHRASE_01_02 0.50, USER_IN_BLACKLIST 100.00)
	>X-Computer-Medic-MailScanner-SpamScore:
	>ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss
	>
	>MS passes it Spamassassin and Spamassassin marks it.
	>
	>So I think the whitelisted mark is coming from a:
	>MailScanner.conf not pointing to the right whitelist.
	>or
	>MailScanner is reading the helo address or the envelope address first.
	>
	>David
	>
	>
	>
	>--
	>Open WebMail Project (http://openwebmail.org)
	>
	>
	>---------- Original Message -----------
	>From: technical coordinator <tc at SHENANDOAH.K12.IN.US>
	>To: MAILSCANNER at JISCMAIL.AC.UK
	>Sent: Fri, 16 Apr 2004 12:41:03 -0500
	>Subject: Re: Hotmail Whitelisted {Scanned}
	>
	> > Mine is set to no.
	> >
	> >       -----Original Message-----
	> >       From: Mark Nienberg [mailto:mark at TIPPINGMAR.COM]
	> >       Sent: Fri 4/16/2004 12:25 PM
	> >       To: MAILSCANNER at JISCMAIL.AC.UK
	> >       Cc:
	> >       Subject: Re: Hotmail Whitelisted {Scanned}
	> >
	> >
	> >
	> >       On 16 Apr 2004 at 10:03, David Shaw wrote:
	> >
	> >       > This is Dale problem.... Not Speaking for Dale but I think the
	>problem
	> >       > is, Why is MS marking emails from hotmail as whitelisted when
	> >       > hotmail.com is in the whitelist. The logs he posted show that
	> >       > hotmail.com is both whitelistes and blacklisted. hotmail is not
	> > in the        > blacklist as well. But he does forward spam to an account
	> > that is       > whitelisted?? Could account for the whitelist??? But that
	> > doesn't       > answer way it is marked as blacklisted.
	> >
	> >       Just a thought, remember that SpamAssassin has its own whitelisting
	> > system that is        separate from MailScanner's.  I think most of us
	> > turn it off (at least the     autowhitelisting feature) with the
	> > following in MailScanner.conf.
	> >
	> >       # Set this option to "yes" to enable the automatic whitelisting
	>functions
	> >       # available within SpamAssassin. This will cause addresses from
	> > which you     # get real mail, to be marked so that it will never
	> > incorrectly spam-tag  # messages from those addresses.        SpamAssassin
	> > Auto Whitelist = no
	> >       --
	> >       Mark W. Nienberg, SE
	> >       Tipping Mar + associates
	> >       1906 Shattuck Ave, Berkeley, CA  94704
	> >       visit our website at http://www.tippingmar.com
	> >
	> >
	> > -- This message has been scanned for viruses and dangerouscontent by
	> > Computer Medic's Email Server, and isbelieved to be clean of
	> > Viruses. Computer Medic would like to thank MailScanner for theirsupport.
	> > Please contact support at computer-medic.us if you have questions about
	> > this email.
	>------- End of Original Message -------
	>
	>--
	>This message has been scanned for viruses and dangerous
	>content by Computer Medic's Email Server, and is
	>believed to be clean of Viruses.
	>
	>Computer Medic would like to thank MailScanner for their
	>support.
	>
	>Please contact support at computer-medic.us if you have
	>questions about this email.
	
	--
	Julian Field
	www.MailScanner.info
	Professional Support Services at www.MailScanner.biz
	MailScanner thanks transtec Computers for their support
	PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654