whitelist not working

[Mike Pelley]

Ugo Bellavance wrote:

>>-----Message d'origine-----
>>De : Mike Pelley [mailto:mike at PELLEYS.COM]
>>Envoyé : 10 mars, 2004 20:25
>>À : MAILSCANNER at JISCMAIL.AC.UK
>>Objet : whitelist not working
>>
>>
>>Hi All.
>>
>>I'm new to the list, but I've been running MailScanner with Postfix on
>>Red Hat 8 for about a year on my home hobby server.  I have scripts
>>created to automatically update the Postfix (postfix.in actually)
>>body_checks and header_checks maps each night.
>>
>>The problem that has just started happening is that my inside systems
>>(more correctly my wife's!) has started rejecting some of her 
>>e-mails as
>>being spam.  I've  gone into the MailScanner
>>/etc/MailScanner/rules/spam.whitelist.rules file and have tried
>>everything to prevent her system (indeed all of my internal systems)
>>    
>>
>>from being scanned for spam.
>  
>
>>Here's my spam.whitelist.rules file:
>>
>>cat spam.whitelist.rules
>># This is where you can build a Spam WhiteList
>># Addresses matching in here, with the value
>># "yes" will never be marked as spam.
>>From:           192.168.0.      yes
>>From:           pelleys.com     yes
>>From:           192.168.0.3     yes
>>FromOrTo:       default         no
>>
>>However, she is still being rejected.  Is this a MailScanner or Postfix
>>issue?
>>    
>>
>Depends on your devinition of "rejected"
>
>Could you make us see some logs of rejected mail?
>
>Your MailScanner machine on the same subnet?
>
>Have you restarted MailScanner after your config change?
>
>  
>
>>Thanks!
>>
>>Cheers,
>>Mike
>>mike at pelleys.com
>>
>>    
>>
Of course, when I try to send the entry in the maillog it gets trapped 
as spam.  arrrgggggg!  Removing body_checks for now!

Here's a sample entry from /var/log/maillog:

"Mar 10 20:08:51 sparta postfix/cleanup[3766]: CDA7F5823E: reject: body 3Ank42j6GvSnGMoSto3Lq7pPa3V9TwpUnyXglGT19e+r+/1PQbFDLNBbK5eGa8hiOXAADTRkqo6n; from=<the-wife at pelleys.com> to=<abcdefghi at some-isp.ca>: SecuritySage SPAM-ID: b20030701-78001 Your email had spam-like body contents. To report this message as non-spam, please follow the instructions available at http://www.securitysage.com/spam.html



My MailScanner machine is on the same subnet with the workstations.

After each config change I've tried both restarting and reloading the 
service.

One other bit of information, the local mail messages are have JPG 
attachments.  Could it be that MailScanner is finding the virus string 
in the MIME-encoded message and bouncing the message?

Thanks,
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040311/07622f9e/attachment-0001.html