Reason for whitelisting?

[Matt Kettler]

Richard D Alloway wrote:
> 
> I am receiving some spam that should be getting flagged or deleted, but
> is being marked as "not spam (whitelisted)" by MailScanner.
> 
> When I look at the logs for the offending message, I see things like:

<snip>
> Jul 17 15:50:23 smtp-gateway-4 MailScanner[10318]: Message
> l6HJnjqf014254 from xx.xxx.xx.xx (gadaandstelecommbef at xxxxxxxxxxxxxx) is
> whitelisted
> Jul 17 15:50:29 smtp-gateway-4 MailScanner[10318]: Message
> l6HJnjqf014254 from xx.xxx.xx.xx
> (gadaandstelecommbef at xxxxxxxxxxxxxxxxxx) to xxxxxxx is not spam
> (whitelisted), SpamAssassin (not cached, score=15.974, required 4,

<snip>

> 
> None of the recipients, IP addresses, domain names, etc are in any of
> our configuration files at all.
> 
> How can I track down the exact part of the message that is triggering
> the whitelisting in MailScanner?

Take a look at the file pointed to by your "Is Definitely Not Spam" setting in
MailScanner.conf.

By default this would be /etc/MailScanner/rules/spam.whitelist.rules