Header added to outgoing messages

[Mike]

    [ The following text is in the "ISO-8859-15" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>Behalf Of Steffan Henke
>
>> Bcc or Cc or To is irrelevant, they are all just recipients.
>> MailScanner doesn't use the headers.
>
>That's what I thought, so I really don't see why that header is added
>to an outgoing mail.
>In addition, I had some problems whitelisting lately, especially from
>sans.org. Although I have
>
>From:   *@sans.org        yes
>
>in my spam.whitelist.rules, these emails are close to being marked as
>spam:
>
>From: The SANS Institute <Webcast at sans.org>

What Julian is trying to say, is that MS only knows/looks at the ENVELOPE From (MAIL FROM:) and To (RCPT TO:). The From: that you state above (Webcast at sans.org) is NOT the ENVELOPE From. Check your MTA logs to see the ENVELOPE From, or add the X-MailScanner-Envelope-From: header (configure in MailScanner.conf).

>Errors-To: <bounce at mailings.sans.org>
>Sender: <bounce at mailings.sans.org>
>
>I am going to whitelist sans.org in the SpamAssassin conf as well, but I
>don't understand why the whitelisting for these particular mails is not
>applied.

Presumably, you should whitelist:

From:	*@*.sans.org	yes

The ENVELOPE From is probably bounce at mailings.sans.org (from the mailings.sans.org domain, NOT sans.org).

>Regards,
>
>Steffan

Mike.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!