Whitelisting doesn't appear to work

[Tony Stocker]

Yes I did reload after making the change, and it definitely is my
server marking it as spam.

On 8/15/06, Alex Neuman van der Hans <alex at nkpanama.com> wrote:
> Then your server probably didn't mark it as SPAM, somebody else's did.
>
> Did you restart/reload MailScanner after the change?
>
>
> Tony Stocker wrote:
> > Hello All,
> >
> > I've set some entries in /etc/MailScanner/rules/spam.whitelist.rules
> > because I have had several messages marked as spam that were actually
> > the MailScanner "Virus Detected" messages.  I'm modifying the
> > addresses slightly to protect myself, but let's say that my
> > mailserver's address is "197.100.235.132", this then is the entry that
> > I have in the spam.whitelist.rules file:
> >
> > From:           197.100.235.    yes
> >
> > However, I am still getting "Virus Detected" messages marked as spam,
> > (see slightly munged example below) even with this entry.  What am I
> > doing wrong?
> >
> > --------------------------------------------------------------------------------------------------------------------------
> >
> > Return-Path: <postmaster at pps-mail.example.com>
> > X-Original-To: postmaster
> > Delivered-To: tony.stocker at pps-mail.example.com
> > Received: by pps-mail.example.com (Postfix, from userid 89)
> >    id 82E008EA9A; Tue, 15 Aug 2006 17:49:21 -0400 (EDT)
> > From: "MailScanner" <postmaster at pps-mail.example.com>
> > To: postmaster at pps-mail.example.com
> > Subject: { SPAM } Virus Detected
> > Content-type: text/plain; charset=ISO-8859-1
> > Message-Id: <20060815214921.82E008EA9A at pps-mail.example.com>
> > Date: Tue, 15 Aug 2006 17:49:21 -0400 (EDT)
> > MIME-Version: 1.0
> > X-PPS-MailScanner-Information: Please contact the ISP for more information
> > X-PPS-MailScanner: Found to be clean
> > X-PPS-MailScanner-SpamCheck: spam, SpamAssassin (not cached, score=3.723,
> >    required 3, BAYES_50 0.00, INFO_TLD 1.27, NO_RELAYS -0.00,
> >    SPOOF_COM2COM 2.45)
> > X-PPS-MailScanner-SpamScore: sss
> > X-PPS-MailScanner-From: postmaster at pps-mail.example.com
> > X-Spam-Status: Yes
> >
> > The following e-mails were found to have: Virus Detected
> >
> >    Sender: supprefnum48150724253494id at 53.com
> > IP Address: 197.100.235.38
> > Recipient: john.smithson at pps-mail.example.com
> >   Subject: Important Banking Mail From Fifth Third Bank
> > MessageID: 86EEE8EA30.069FE
> > Quarantine:
> >    Report: ClamAV Module: msg-30327-71.html was infected:
> > HTML.Phishing.Bank-627
> >
> > --------------------------------------------------------------------------------------------------------------------------
> >
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>