mailscanner declaring mails from local domains as spam

[Martin Hepworth]

Hi

you've got the default line first in the ruleset. This should *always*
go last. MS processess the rules sequentially until it hits a result
then stops processing the file. So move the "FromOrTo: default  no" to
the bottom of the file and you should it work fine.

As to why the RBL's (URI and normal) are firing I have no idea, what the
heck have you got in those emails....

-- 
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


> Senthu wrote:
> 
>> hi
>>
>> This are my configurations for setting rules/spam.whitelist.rules
>>
>> # This is where you can build a Spam WhiteList
>> # Addresses matching in here, with the value
>> # "yes" will never be marked as spam.
>> #From:          152.78.         yes
>> #From:          130.246.        yes
>> FromOrTo:       default         no
>> From:           219.94.76.122   yes
>> FromAndTo:      @privasia.com   yes
>> FromAndTo:      @procurehere.com        yes
>>
>> And also how can i know about spamassassin, autolearn=spam details. is
>> it doing a self understanding of the spam mail and ignoring it in
>> future. i would prefer to know how can i disable the auto learning and
>> provide my own set of rules.
>>
>>
>> Thank you
>> senthu
>>
>>
>>
>>
>>> On 6/24/05, Mike Kercher <mike at camaross.net> wrote:
>>>
>>>> Looks like your IP is on the SBL+XBL
>>>>
>>>> What do your rulesets look like?
>>>>
>>>>
>>>> -----Original Message-----
>>>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] 
>>>> On Behalf
>>>> Of Senthu
>>>> Sent: Thursday, June 23, 2005 11:08 PM
>>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>>> Subject: Re: mailscanner declaring mails from local domains as spam
>>>>
>>>> hi all.
>>>>
>>>> Even after i have listed my ip and domain in the 
>>>> rules/spam.whitelist.rules,
>>>> i still get some of the domain still to be listed as spam, please 
>>>> advise.
>>>> What i am concern about is this line :
>>>> (score=29.72, required 6, autolearn=spam, BAYES_99 3.50, HTML_20_30 
>>>> 0.23,
>>>> HTML_MES SAGE 0.00, MIME_HTML_ONLY 0.18, MIME_HTML_ONLY_MULTI 2.44,
>>>> MPART_ALT_DIFF 0.07, MSGID_FROM_MTA_HEADER 0.05, MSGID_FROM_MTA_ID 
>>>> 1.72,
>>>> RCVD_BY_IP 0.07, RCVD_IN_BL_SPAMCOP_NET 1.22, RCVD_IN_DSBL 3.81, 
>>>> RCVD_IN_XBL
>>>> 3.08, URIBL_AB_SURBL 0.42, URIBL_JP_SURBL 4 .00, URIBL_OB_SURBL 3.21,
>>>> URIBL_SC_SURBL 4.26, URIBL_WS_SURBL 1.46, URI_REDIRECTOR 0.01)
>>>>
>>>> which saying autolearn=spam.  please help... would like to know why my
>>>> domain procurehere.com sending mail to another loacl domain 
>>>> privasia.com is
>>>> being listed spam shown in message (1) below. please help.
>>>>
>>>> (1)
>>>> Message j5N4K5Kp004740 from 219.94.76.122 (vally at procurehere.com) to
>>>> privasia.com is spam, SBL+XBL, SpamAssassin (score=6.584, requ ired 6,
>>>> BAYES_00 -2.60, HTML_MESSAGE 0.00, HTML_TAG_EXIST_TBODY 0.11, 
>>>> RCVD_IN_DSBL
>>>> 3.81, RCVD_IN_XBL 3.08, TO_MALFORMED 2.19)
>>>>
>>>>
>>>> thank you
> 
> 

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!