Messages marked as spam

Tue Mar 30 05:15:16 IST 2004

Gib,
  here is my whitelisted BriansBuzz newsletter and settings..
  Note my comment in the spam.whitelist.rules file.
  Note I also display MailScanner "From" and "To" headers to easily
identify this type of problem...

Sample header of BriansBuzz newsletter via MailScanner..

i2QMBLTq004097
         for <wayne at sb.com.au>; Fri, 26 Mar 2004 14:11:21 -0800
Date: Fri, 26 Mar 2004 14:11:21 -0800
Message-Id: <200403262211.i2QMBLTq004097 at www.actionmessage.com>
Content-Transfer-Encoding: 7bit
Content-Type: multipart/alternative; boundary="ActionMessage_Boundary1"
From: "Brian Livingston" <BrianL at BriansBuzz.com>
MIME-Version: 1.0
Reply-To: "mailbot at BriansBuzz.com" <mailbot at BriansBuzz.com>
Subject: Office XP SP3 problems bite users [Newsletter Comp Version]
To: me at my.com
X-EW-MailScanner-Information: Please contact MIS if this email is NOT
S-P-A-M nor a V-I-R-U-S
X-EW-MailScanner: Found to be clean of Viruses
X-EW-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin (score=-3.9,
         required 5, AWL 0.00, BAYES_30 -0.93, CLICK_BELOW_CAPS 0.50,
         HABEAS_SWE -4.60, HTML_40_50 0.74, HTML_FONT_BIG 0.22,
         HTML_FONT_COLOR_GRAY 0.10, HTML_LINK_CLICK_CAPS 1.10,
         HTML_LINK_CLICK_HERE 0.10, HTML_WEB_BUGS 0.10,
         LIMITED_TIME_ONLY 0.03)
X-EW-MailScanner-From: bounce+a=bl-c=w040325comp-e=me=my.com at actionmessage.com
X-EW-MailScanner-To: me at my.com

etc/MailScanner/rules/spam.whitelist.rules extract
# Note From is really Reply-To address if present!
# Return-Path overrides From address if present!
From:           actionmessage.com               yes

etc/MailScanner/MailScanner.conf
# Do you want to add the Envelope-From: header?
# This is very useful for tracking where spam came from as it
# contains the envelope sender address.
# This can also be the filename of a ruleset.
Add Envelope From Header = yes

# Do you want to add the Envelope-To: header?
# This can be useful for tracking span destinations, but should be
# used with care due to possible privacy concerns with the use of
# Bcc: headers by users.
# This can also be the filename of a ruleset.
Add Envelope To Header = yes

# This is the name of the Envelope From header
# controlled by the option above.
# This can also be the filename of a ruleset.
Envelope From Header = X-%org-name%-MailScanner-From:

# This is the name of the Envelope To header
# controlled by the option above.
# This can also be the filename of a ruleset.
Envelope To Header = X-%org-name%-MailScanner-To:

Wayne

At 12:06 PM 30/03/2004, you wrote:
>Hi.
>
>I'm still getting the occasional message marked as spam when they should be
>exempted.
>
>Here is my entry from /etc/MailScanner/rulse/spam.whitelist.rules
>
>   From:   *@briansbuzz.com      yes
>
>and an e-mail tagged as spam which should have been exempt.
>
>
>Return-Path: <bounce+a=BL-c=W040325PAID-e=gib=tmisnet.com at ActionMessage.com>
>Received: from www.actionmessage.com (mail.actionmessage.com [66.98.148.152])
>         by thumper.tmisnet.com (8.12.9p2/8.12.9) with ESMTP id i2QLlFQw089460
>         for <gib at tmisnet.com>; Fri, 26 Mar 2004 13:47:15 -0800 (PST)
>         (envelope-from
>bounce+a=BL-c=W040325PAID-e=gib=tmisnet.com at ActionMessage.com)
>Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
>         by www.actionmessage.com (8.12.10/8.12.5) with ESMTP id
>i2QLlFTq030859
>         for <gib at tmisnet.com>; Fri, 26 Mar 2004 13:47:15 -0800
>Date: Fri, 26 Mar 2004 13:47:15 -0800
>Message-Id: <200403262147.i2QLlFTq030859 at www.actionmessage.com>
>Content-Transfer-Encoding: 7bit
>Content-Type: multipart/alternative; boundary="ActionMessage_Boundary1"
>From: "Brian Livingston" <BrianL at BriansBuzz.com>
>MIME-Version: 1.0
>Reply-To: "mailbot at BriansBuzz.com" <mailbot at BriansBuzz.com>
>Subject: {Spam?} Office XP SP3 problems bite users [Newsletter Paid Version]
>To: gib at tmisnet.com
>X-tmisnet-MailScanner-Information: Please contact TMISNET for more information
>X-tmisnet-MailScanner: Found to be clean
>X-tmisnet-MailScanner-SpamCheck: spam, SpamAssassin (score=11.5, required 7,
>         BODY_GAPPY_TEXT 1.92, BODY_OBFU_SEX 2.12, BigEvilList_Y 0.01,
>         BigEvilList_Z 0.01, CLICK_BELOW_CAPS 0.50, EXE_LINK 3.10,
>         HABEAS_SWE -4.60, HTML_40_50 1.06, HTML_FONT_BIG 0.27,
>         HTML_FONT_COLOR_GRAY 0.10, HTML_LINK_CLICK_CAPS 1.10,
>         HTML_LINK_CLICK_HERE 0.10, HTML_MESSAGE 0.10,
>         HTML_TAG_BALANCE_BODY 0.18, HTML_TAG_BALANCE_TABLE 0.19,
>         HTML_WEB_BUGS 0.10, LIMITED_TIME_ONLY 0.25,
>         MIME_MISSING_BOUNDARY 0.16, URI_SUNBELTSOFTWARE 4.82)
>X-tmisnet-MailScanner-SpamScore: 11
>X-UIDL: N*6!!p&["!0*N"!#Bi!!