No subject

the Envelope-From. So I suppose the Envelope-From contained 
user at monster.com (your mail log would tell) and that's why it got 
whitelisted.

As for the general whitelist problem. You can use SA whitelisting. That 
allows to whitelist from addresses coming over certain relays. I think 
it's called whitelist_received or so. If you look in 
/usr/share/spamassassin (which holds the basic rules SA comes with, don't 
change anything there!) you will find some of these rules in the 
xx_whitelisted.cf file or what it's called. But beware: SA whitelisting 
works only on the header not on the envelope!

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
IE-Center: http://ie5.de & http://msie.winware.org

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!