New spam faking whitelisting

[List Account]

Hello all,

I am running MailScanner 4.26.8-1 with postfix 2.0.18, SpamAssassin 2.63 and
ClamAV 0.70.  Starting today, I'm seeing spam messages comming in saying
that they are white listed, but they aren't on my whitelist in
/etc/MailScanner/rules/spam.whitelist.rules.  Here are the message details
from MailWatch:

Received on:    03/06/04 08:40:20
Received by:    mailscanner
Received from:  61.202.42.238 (n042238.ppp.dion.ne.jp)
124.8.92.244
ID:     D0AEE900
Message Headers:        Received: from n042238.ppp.dion.ne.jp
(N042238.ppp.dion.ne.jp [61.202.42.238])
by mailscanner.ourdomain.com (Postfix) with SMTP
id D0AEE900; Thu, 3 Jun 2004 08:40:04 -0500 (CDT)
Received: from bfzoqwcn-rtfu363.de.twirl.English at canada.com ([124.8.92.244])
by umxo4989-eku33.61.202.42.238 with Microsoft SMTPSVC(0.0.8246.1834);
Thu, 03 Jun 2004 07:29:06 -0600
From: "Efren Hyde" <twirl.English at canada.com>
To: user at ourdomain.com
Cc: info at ourdomain.com, user2 at ourdomain.com,
user3 at ourdomain.com, user4 at ourdomain.com,
jobs at ourdomain.com, user5 at ourdomain.com,
user6 at ourdomain.com
Subject: invest in yourself, get a new job
Date: Thu, 03 Jun 2004 15:26:06 +0200
Message-ID: <18484457687322.64.53502 at eunkzq-db12511.localhost>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--13344725039681107"
From:   twirl.english at canada.com
To:     user at ourdomain.com
user at ourdomain.com
user2 at ourdomain.com
user2 at ourdomain.com
user3 at ourdomain.com
user3 at ourdomain.com
jobs at ourdomain.com
jobs at ourdomain.com
user4 at ourdomain.com
user4 at ourdomain.com
user5 at ourdomain.com
user5 at ourdomain.com
Subject:        invest in yourself, get a new job
Size:   2.5Kb
Virus:   N
Blocked File:    N
Other Infection:         N
Report:
Spam:    N   Action(s): deliver
High Scoring Spam:       N
Listed in RBL:   N
Whitelisted:     Y
Blacklisted:     N
SpamAssassin Spam:       N
SpamAssassin Score:     0.00\

Is anyone else seeing this, and what can I do to stop it?

Thanks,

Howard

_________________________________________________________________
Getting married? Find great tips, tools and the latest trends at MSN Life
Events. http://lifeevents.msn.com/category.aspx?cid=married

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html