Whitelisted domain still tagged as spam

John Urness jurness at tomsawyer.com
Sat Feb 18 18:52:42 GMT 2006


Hi all,
I have a lot of email from a yahoo group that is getting tagged as spam
because spamcop has the group listed. Even if I whitelist the sending
address with the mailscanner whitelist file, it never gets whitelisted. This
works with other domains and/or email addresses that I use in the whitelist
file.

I *do* want it to check spam lists as well as score the email using spam
assassin, but still let it through if it is whitelisted.

Here is a sample below of a before and an after header from an individual
user on this mailing list. This is actually tagged as spam after I change
the below setting from "yes" to "no" and Mailscanner was then restarted. The
original one scores correctly as ham, yet because of spamcop, gets tagged.
Either way, it gets a spamcop hit and and is tagged. What might be wrong
with my configuration?

>Check SpamAssassin If On Spam List = no


Before:
Received: from n3a.bullet.dcn.yahoo.com (n3a.bullet.dcn.yahoo.com
[216.155.203.223])
	by unixserv0.tomsawyer.com (8.12.9/8.12.9) with SMTP id
k0OGKpW1005083
	for <k at tomsawyer.com>; Tue, 24 Jan 2006 08:20:51 -0800 (PST)
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com;
	
b=qetIEaEi1xsxVujqQoZOw79i62uA2AIMh8n8/UGdA+ua/tZyl9mBc0JwqbUlJGyJJ2OkxcoiLh
85j4TDnd4kiqV2sWgz++FVfeoWBz9O+5c97puwEOIcG8flVazD1pr5;
Received: from [216.155.201.64] by n3.bullet.dcn.yahoo.com with NNFMP; 24
Jan 2006 16:20:42 -0000
Received: from [66.218.69.5] by t1.bullet.dcn.yahoo.com with NNFMP; 24 Jan
2006 16:20:41 -0000
Received: from [66.218.66.99] by t5.bullet.scd.yahoo.com with NNFMP; 24 Jan
2006 16:20:41 -0000
X-Yahoo-Newman-Property: groups-email
X-Sender: senderemail
X-Apparently-To: HATT at yahoogroups.com
Received: (qmail 57516 invoked from network); 24 Jan 2006 16:20:40 -0000
Received: from unknown (66.218.66.218)
  by m34.grp.scd.yahoo.com with QMQP; 24 Jan 2006 16:20:40 -0000
Received: from unknown (HELO uproxy.gmail.com) (66.249.92.202)
  by mta3.grp.scd.yahoo.com with SMTP; 24 Jan 2006 16:20:40 -0000
Received: by uproxy.gmail.com with SMTP id m3so365979uge
        for <HATT at yahoogroups.com>; Tue, 24 Jan 2006 08:20:39 -0800 (PST)
Received: by 10.48.225.3 with SMTP id x3mr443884nfg;
        Tue, 24 Jan 2006 06:52:01 -0800 (PST)
Received: by 10.48.12.20 with HTTP; Tue, 24 Jan 2006 06:52:01 -0800 (PST)
Message-ID: <375e3cb30601240652x675f83b0ia4c64904eefad906 at mail.gmail.com>
To: Howard Lebowitz <howard.lebowitz at harlandfs.com>
Cc: HATT at yahoogroups.com
In-Reply-To: <205CA9DB99DA0A42B1317BCC83E95FCCCE38BF at ex-lkm1.harlandfs.com>
References: <205CA9DB99DA0A42B1317BCC83E95FCCCE38BF at ex-lkm1.harlandfs.com>
X-Originating-IP: 66.249.92.202
X-eGroups-Msg-Info: 1:12:0:0
From: senderemail
X-Yahoo-Profile: 
Sender: HATT at yahoogroups.com
MIME-Version: 1.0
Mailing-List: list HATT at yahoogroups.com; contact HATT-owner at yahoogroups.com
Delivered-To: mailing list HATT at yahoogroups.com
List-Id: <HATT.yahoogroups.com>
Precedence: bulk
List-Unsubscribe: <mailto:HATT-unsubscribe at yahoogroups.com>
Date: Tue, 24 Jan 2006 09:52:01 -0500
Subject: <<<<This is Spam>>>> Re: [HATT] RE: Q: What's Up With Madcap?
(PROMO PRICING)
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-TSS-MailScanner-Information: See www.mailscanner.info for information
X-TSS-MailScanner: Appears to be free of infection
X-TSS-MailScanner-SpamCheck: spam, spamcop.net, SpamAssassin (score=-1.414,
	required 4, AWL -1.01, BAYES_00 -2.60, RCVD_IN_BL_SPAMCOP_NET 1.56,
	SARE_MSGID_LONG40 0.64)
X-TSS-MailScanner-From:
sentto-2077532-60082-1138119641-localuser=tomsawyer.com at returns.groups.yahoo
.com




After: 
Received: from n6a.bullet.dcn.yahoo.com (n6a.bullet.dcn.yahoo.com
[216.155.203.226])
	by unixserv0.tomsawyer.com (8.12.9/8.12.9) with SMTP id
k0OK3GW1006867
	for <localuser at tomsawyer.com>; Tue, 24 Jan 2006 12:03:17 -0800 (PST)
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com;
	
b=FihSN52cWuzYyiKLCtL83i5/tFr2zLxV5NYDfgL70GyglzVZlNwhMv6E0o+qJ6r51wJer9/nAr
YIll8vU3QSgLoFcLnLqrwEwX4b5eLIyN9SBYF59KyoFz/KkZGD++gI;
Received: from [216.155.201.65] by n6.bullet.dcn.yahoo.com with NNFMP; 24
Jan 2006 20:03:11 -0000
Received: from [66.218.69.2] by t2.bullet.dcn.yahoo.com with NNFMP; 24 Jan
2006 20:03:10 -0000
Received: from [66.218.66.35] by t2.bullet.scd.yahoo.com with NNFMP; 24 Jan
2006 20:03:10 -0000
X-Yahoo-Newman-Property: groups-email
X-Sender: senderemail
X-Apparently-To: HATT at yahoogroups.com
Received: (qmail 34688 invoked from network); 24 Jan 2006 20:03:09 -0000
Received: from unknown (66.218.66.172)
  by m29.grp.scd.yahoo.com with QMQP; 24 Jan 2006 20:03:09 -0000
Received: from unknown (HELO uproxy.gmail.com) (66.249.92.200)
  by mta4.grp.scd.yahoo.com with SMTP; 24 Jan 2006 20:03:07 -0000
Received: by uproxy.gmail.com with SMTP id m3so120564ugc
        for <HATT at yahoogroups.com>; Tue, 24 Jan 2006 12:02:42 -0800 (PST)
Received: by 10.49.88.3 with SMTP id q3mr479305nfl;
        Tue, 24 Jan 2006 12:02:42 -0800 (PST)
Received: by 10.48.12.20 with HTTP; Tue, 24 Jan 2006 12:02:42 -0800 (PST)
Message-ID: <375e3cb30601241202g747298d3w386e4c26210a4aed at mail.gmail.com>
To: address0
Cc: address1, address2, HATT at yahoogroups.com
In-Reply-To: <162e01c620f8$691cc830$0401a8c0 at RicksPC>
References: <BAY108-F11455D94CB5F5BE1F7AD6CF0130 at phx.gbl>
	 <162e01c620f8$691cc830$0401a8c0 at RicksPC>
X-Originating-IP: 66.249.92.200
X-eGroups-Msg-Info: 1:12:0:0
From: senderemail
X-Yahoo-Profile: #####
Sender: HATT at yahoogroups.com
MIME-Version: 1.0
Mailing-List: list HATT at yahoogroups.com; contact HATT-owner at yahoogroups.com
Delivered-To: mailing list HATT at yahoogroups.com
List-Id: <HATT.yahoogroups.com>
Precedence: bulk
List-Unsubscribe: <mailto:HATT-unsubscribe at yahoogroups.com>
Date: Tue, 24 Jan 2006 15:02:42 -0500
Subject: <<<<This is Spam>>>> Re: [HATT] What happens to RoboHelp when IE
7.0 is released?
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-TSS-MailScanner-Information: See www.mailscanner.info for information
X-TSS-MailScanner: Appears to be free of infection
X-TSS-MailScanner-SpamCheck: spam, spamcop.net
X-TSS-MailScanner-From:
sentto-2077532-60089-1138132990-localuser=tomsawyer.com at returns.groups.yahoo
.com

Best,

John



More information about the MailScanner mailing list