Use Spamassassin - Not working properly

[Stephen Swaney]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Jim Scott
> Sent: Friday, July 30, 2004 2:56 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Use Spamassassin - Not working properly
>
> > On Fri, 30 Jul 2004 09:18:43 -0700, Jim Scott <jscott at infoconex.com>
> wrote:
> Not sure what to look at. We setup a rule in the MailScanner.conf
> file like this.
>
>  /etc/MailScanner/rules/spamassassin.rules
>
>  The file contains a couple of test rules.
>
>  For example:
>  FromOrTo:    jscott at infoconex.com   yes
>  From:    192.168.105.5/24    yes
>  From:    Customers block     yes
>
>  If I send or receive email it gets processed by spamassassin. If
> I
>  send an email from the private IP space no matter what my from
> email
>  address is it gets scanned by spamassassin as it should.
>
>  However my customers IP space nothing is getting processed?
>
>  The only thing that is different is that I have 2 IP's bound to
> this
>  machine. I have the client use the 2nd IP to relay emails via so
> I
>  can monitor traffic generated. The customers has multiple
> networks
>  and for each I have the whole /24 added.
>
>  Any ideas what to look at?
>
>  It sure looks like it should work properly. Just isnt.
>
>  Jim
>
> Anyone able to help me on this one?
>
> Jim
>

White space or tabs shouldn't matter
192.126. or 192.168 or regular expressions should be the same


What does "Customers block" in you file represent?

Here is a copy of a file that does work.

# Start of File
# This file controls which email is scanned for spam
# and MailScanner security checks
# Addresses matching in here, with the value
# "no" will never be marked as spam or be checked by
# Mailscanner or SpamAssassin checks
# Use IP addresses whenever possible
# From this host to allow release from Quarantine
From:           127.0.0.1       no
# For somedomain.net & another.com
From:           192.22.14.19   no
# From otherdomain.com
From:           192.143.190.16 no
# Always, always end with a default rule
FromOrTo:       default         yes
# EOF


Do read the EXAMPE and README files in %rules-dir%
Additional documentation available in the MailScanner Manual available at
www.fsl.com/support

Steve

Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com

> > > > Is there any possibility that your customers ip block is getting
> NATted?
> > > >
> > > No, I have verified that the IP showing up in my maillogs is one of
> the
> IP's
> > > I have listed. By the way they have about 40 locations that I am doing
> this
> > > for. None of them have worked yet. In all cases I can see in my logs
> that
> > > the IP it is being sent from is the IP range I have listed.
> > Mmmmhhh time to start with stupid questions...
> >
> > You're sure that the fields in the non-working rules are separated by
> > tabs and not spaces, are you?
> >
> > An excess in copy&paste may have put spaces where you had tabs...
> >
> Just looked. Definitely Tabs.
>
> Jim
>



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Fortress Systems Ltd.
www.fsl.com

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html