Whitelisting doesn't appear to work

[Alex Neuman van der Hans]

Then your server probably didn't mark it as SPAM, somebody else's did.

Did you restart/reload MailScanner after the change?


Tony Stocker wrote:
> Hello All,
> 
> I've set some entries in /etc/MailScanner/rules/spam.whitelist.rules
> because I have had several messages marked as spam that were actually
> the MailScanner "Virus Detected" messages.  I'm modifying the
> addresses slightly to protect myself, but let's say that my
> mailserver's address is "197.100.235.132", this then is the entry that
> I have in the spam.whitelist.rules file:
> 
> From:           197.100.235.    yes
> 
> However, I am still getting "Virus Detected" messages marked as spam,
> (see slightly munged example below) even with this entry.  What am I
> doing wrong?
> 
> -------------------------------------------------------------------------------------------------------------------------- 
> 
> Return-Path: <postmaster at pps-mail.example.com>
> X-Original-To: postmaster
> Delivered-To: tony.stocker at pps-mail.example.com
> Received: by pps-mail.example.com (Postfix, from userid 89)
>    id 82E008EA9A; Tue, 15 Aug 2006 17:49:21 -0400 (EDT)
> From: "MailScanner" <postmaster at pps-mail.example.com>
> To: postmaster at pps-mail.example.com
> Subject: { SPAM } Virus Detected
> Content-type: text/plain; charset=ISO-8859-1
> Message-Id: <20060815214921.82E008EA9A at pps-mail.example.com>
> Date: Tue, 15 Aug 2006 17:49:21 -0400 (EDT)
> MIME-Version: 1.0
> X-PPS-MailScanner-Information: Please contact the ISP for more information
> X-PPS-MailScanner: Found to be clean
> X-PPS-MailScanner-SpamCheck: spam, SpamAssassin (not cached, score=3.723,
>    required 3, BAYES_50 0.00, INFO_TLD 1.27, NO_RELAYS -0.00,
>    SPOOF_COM2COM 2.45)
> X-PPS-MailScanner-SpamScore: sss
> X-PPS-MailScanner-From: postmaster at pps-mail.example.com
> X-Spam-Status: Yes
> 
> The following e-mails were found to have: Virus Detected
> 
>    Sender: supprefnum48150724253494id at 53.com
> IP Address: 197.100.235.38
> Recipient: john.smithson at pps-mail.example.com
>   Subject: Important Banking Mail From Fifth Third Bank
> MessageID: 86EEE8EA30.069FE
> Quarantine:
>    Report: ClamAV Module: msg-30327-71.html was infected:
> HTML.Phishing.Bank-627
> 
> -------------------------------------------------------------------------------------------------------------------------- 
>