Whitelist issue

[Ugo Bellavance]

Gordon Colyn wrote:
> Thanks,
> 
> 1) The rule was applied by using the mailwatch interface written to mysql

Using the headers from or the enveloppe from?  MailScanner's white/black 
list features are based on enveloppe address.

> 2) Where can I find the bad_helo HACK?
> 3) I have implemented the Envelope from in MailScanner.
> 
> Regards
> 
> Gordon
> 
> ----- Original Message ----- 
> From: "Res" <res at ausics.net>
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Sent: Friday, November 03, 2006 1:33 PM
> Subject: Re: Whitelist issue
> 
> 
> On Fri, 3 Nov 2006, Gordon Colyn wrote:
> 
>> ITNT Banner Campaign
>> This email got through the MailScanner classified as whitelisted.  The 
>> user
>> has whitelisted from andreb at tcmwarehouse.com to sales at tcmwarehouse.com.
> 
> Can you show uo how you have written the rules
> 
> 
>> Received: from mail.sugarloafproducts.com (port=15187 helo=ewregvtneyhik)
> 
> I'd suggest you grab the bad_helo HACK and use it as well
> people with legitimate mail dont throw crap like that in helos
> 
> 
>> How can it be classified as whitelisted if the from addres is
>> yqhsj at sugartime.net?  It score 26.
>>
> 
> Start using Envelope from in MailScanner
> 
>