Whitelisted domain still tagged as spam
Julian Field
MailScanner at ecs.soton.ac.uk
Sat Feb 18 19:44:00 GMT 2006
John Urness wrote:
> Hi all,
> I have a lot of email from a yahoo group that is getting tagged as spam
> because spamcop has the group listed. Even if I whitelist the sending
> address with the mailscanner whitelist file, it never gets whitelisted. This
> works with other domains and/or email addresses that I use in the whitelist
> file.
>
> I *do* want it to check spam lists as well as score the email using spam
> assassin, but still let it through if it is whitelisted.
>
> Here is a sample below of a before and an after header from an individual
> user on this mailing list. This is actually tagged as spam after I change
> the below setting from "yes" to "no" and Mailscanner was then restarted. The
> original one scores correctly as ham, yet because of spamcop, gets tagged.
> Either way, it gets a spamcop hit and and is tagged. What might be wrong
> with my configuration?
>
>
>> Check SpamAssassin If On Spam List = no
>>
>
>
> Before:
> Received: from n3a.bullet.dcn.yahoo.com (n3a.bullet.dcn.yahoo.com
> [216.155.203.223])
> by unixserv0.tomsawyer.com (8.12.9/8.12.9) with SMTP id
> k0OGKpW1005083
> for <k at tomsawyer.com>; Tue, 24 Jan 2006 08:20:51 -0800 (PST)
> Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
> DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com;
>
> b=qetIEaEi1xsxVujqQoZOw79i62uA2AIMh8n8/UGdA+ua/tZyl9mBc0JwqbUlJGyJJ2OkxcoiLh
> 85j4TDnd4kiqV2sWgz++FVfeoWBz9O+5c97puwEOIcG8flVazD1pr5;
> Received: from [216.155.201.64] by n3.bullet.dcn.yahoo.com with NNFMP; 24
> Jan 2006 16:20:42 -0000
> Received: from [66.218.69.5] by t1.bullet.dcn.yahoo.com with NNFMP; 24 Jan
> 2006 16:20:41 -0000
> Received: from [66.218.66.99] by t5.bullet.scd.yahoo.com with NNFMP; 24 Jan
> 2006 16:20:41 -0000
> X-Yahoo-Newman-Property: groups-email
> X-Sender: senderemail
> X-Apparently-To: HATT at yahoogroups.com
> Received: (qmail 57516 invoked from network); 24 Jan 2006 16:20:40 -0000
> Received: from unknown (66.218.66.218)
> by m34.grp.scd.yahoo.com with QMQP; 24 Jan 2006 16:20:40 -0000
> Received: from unknown (HELO uproxy.gmail.com) (66.249.92.202)
> by mta3.grp.scd.yahoo.com with SMTP; 24 Jan 2006 16:20:40 -0000
> Received: by uproxy.gmail.com with SMTP id m3so365979uge
> for <HATT at yahoogroups.com>; Tue, 24 Jan 2006 08:20:39 -0800 (PST)
> Received: by 10.48.225.3 with SMTP id x3mr443884nfg;
> Tue, 24 Jan 2006 06:52:01 -0800 (PST)
> Received: by 10.48.12.20 with HTTP; Tue, 24 Jan 2006 06:52:01 -0800 (PST)
> Message-ID: <375e3cb30601240652x675f83b0ia4c64904eefad906 at mail.gmail.com>
> To: Howard Lebowitz <howard.lebowitz at harlandfs.com>
> Cc: HATT at yahoogroups.com
> In-Reply-To: <205CA9DB99DA0A42B1317BCC83E95FCCCE38BF at ex-lkm1.harlandfs.com>
> References: <205CA9DB99DA0A42B1317BCC83E95FCCCE38BF at ex-lkm1.harlandfs.com>
> X-Originating-IP: 66.249.92.202
> X-eGroups-Msg-Info: 1:12:0:0
> From: senderemail
> X-Yahoo-Profile:
> Sender: HATT at yahoogroups.com
> MIME-Version: 1.0
> Mailing-List: list HATT at yahoogroups.com; contact HATT-owner at yahoogroups.com
> Delivered-To: mailing list HATT at yahoogroups.com
> List-Id: <HATT.yahoogroups.com>
> Precedence: bulk
> List-Unsubscribe: <mailto:HATT-unsubscribe at yahoogroups.com>
> Date: Tue, 24 Jan 2006 09:52:01 -0500
> Subject: <<<<This is Spam>>>> Re: [HATT] RE: Q: What's Up With Madcap?
> (PROMO PRICING)
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 7bit
> X-TSS-MailScanner-Information: See www.mailscanner.info for information
> X-TSS-MailScanner: Appears to be free of infection
> X-TSS-MailScanner-SpamCheck: spam, spamcop.net, SpamAssassin (score=-1.414,
> required 4, AWL -1.01, BAYES_00 -2.60, RCVD_IN_BL_SPAMCOP_NET 1.56,
> SARE_MSGID_LONG40 0.64)
> X-TSS-MailScanner-From:
> sentto-2077532-60082-1138119641-localuser=tomsawyer.com at returns.groups.yahoo
> .com
>
This is the relevant address that you need to whitelist. Perhaps just
whitelist the whole of returns.groups.yahoo.com. You could move the
whitelist to Spam Checks = instead of Is Definitely Not Spam = as that
will stop it doing any spam checks at all.
>
>
>
> After:
> Received: from n6a.bullet.dcn.yahoo.com (n6a.bullet.dcn.yahoo.com
> [216.155.203.226])
> by unixserv0.tomsawyer.com (8.12.9/8.12.9) with SMTP id
> k0OK3GW1006867
> for <localuser at tomsawyer.com>; Tue, 24 Jan 2006 12:03:17 -0800 (PST)
> Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
> DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com;
>
> b=FihSN52cWuzYyiKLCtL83i5/tFr2zLxV5NYDfgL70GyglzVZlNwhMv6E0o+qJ6r51wJer9/nAr
> YIll8vU3QSgLoFcLnLqrwEwX4b5eLIyN9SBYF59KyoFz/KkZGD++gI;
> Received: from [216.155.201.65] by n6.bullet.dcn.yahoo.com with NNFMP; 24
> Jan 2006 20:03:11 -0000
> Received: from [66.218.69.2] by t2.bullet.dcn.yahoo.com with NNFMP; 24 Jan
> 2006 20:03:10 -0000
> Received: from [66.218.66.35] by t2.bullet.scd.yahoo.com with NNFMP; 24 Jan
> 2006 20:03:10 -0000
> X-Yahoo-Newman-Property: groups-email
> X-Sender: senderemail
> X-Apparently-To: HATT at yahoogroups.com
> Received: (qmail 34688 invoked from network); 24 Jan 2006 20:03:09 -0000
> Received: from unknown (66.218.66.172)
> by m29.grp.scd.yahoo.com with QMQP; 24 Jan 2006 20:03:09 -0000
> Received: from unknown (HELO uproxy.gmail.com) (66.249.92.200)
> by mta4.grp.scd.yahoo.com with SMTP; 24 Jan 2006 20:03:07 -0000
> Received: by uproxy.gmail.com with SMTP id m3so120564ugc
> for <HATT at yahoogroups.com>; Tue, 24 Jan 2006 12:02:42 -0800 (PST)
> Received: by 10.49.88.3 with SMTP id q3mr479305nfl;
> Tue, 24 Jan 2006 12:02:42 -0800 (PST)
> Received: by 10.48.12.20 with HTTP; Tue, 24 Jan 2006 12:02:42 -0800 (PST)
> Message-ID: <375e3cb30601241202g747298d3w386e4c26210a4aed at mail.gmail.com>
> To: address0
> Cc: address1, address2, HATT at yahoogroups.com
> In-Reply-To: <162e01c620f8$691cc830$0401a8c0 at RicksPC>
> References: <BAY108-F11455D94CB5F5BE1F7AD6CF0130 at phx.gbl>
> <162e01c620f8$691cc830$0401a8c0 at RicksPC>
> X-Originating-IP: 66.249.92.200
> X-eGroups-Msg-Info: 1:12:0:0
> From: senderemail
> X-Yahoo-Profile: #####
> Sender: HATT at yahoogroups.com
> MIME-Version: 1.0
> Mailing-List: list HATT at yahoogroups.com; contact HATT-owner at yahoogroups.com
> Delivered-To: mailing list HATT at yahoogroups.com
> List-Id: <HATT.yahoogroups.com>
> Precedence: bulk
> List-Unsubscribe: <mailto:HATT-unsubscribe at yahoogroups.com>
> Date: Tue, 24 Jan 2006 15:02:42 -0500
> Subject: <<<<This is Spam>>>> Re: [HATT] What happens to RoboHelp when IE
> 7.0 is released?
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 7bit
> X-TSS-MailScanner-Information: See www.mailscanner.info for information
> X-TSS-MailScanner: Appears to be free of infection
> X-TSS-MailScanner-SpamCheck: spam, spamcop.net
> X-TSS-MailScanner-From:
> sentto-2077532-60089-1138132990-localuser=tomsawyer.com at returns.groups.yahoo
> .com
>
> Best,
>
> John
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list