Host in whitelist but tagged as SPAM

Pascal Maes pascal.maes at elec.ucl.ac.be
Fri Dec 19 10:47:19 GMT 2008


Hello,

I have the following lines in the file /opt/MailScanner/etc/rules/ 
spam_whitelist.rules


From:	85.201.63.77					yes
From:	85.201.63.77/32					yes
From:	user-85-201-63-77.static.tvcablenet.be		yes
From:	uclsbs.ucl.lan					yes

In MailScanner.conf, I have :

Is Definitely Not Spam = %rules-dir%/spam_whitelist.rules


but the following mail comming from 85.201.63.77 has been tagged as  
spam :

Received: from uclsbs.ucl.lan (unknown [85.201.63.77])
by smtp1.sgsi.ucl.ac.be (Postfix) with ESMTP; Fri,
12 Dec 2008 12:50:43 +0100 (CET)
Date: Fri, 12 Dec 2008 12:50:30 +0100
Subject: {Spam?} =?iso-8859-1?Q? 
menus_de_la_semaine_du_15_au_20_d=E9cembre?=
Message-id: <78AEBC3D06BBD9428F6FC4FAB44118A7136DC5 at uclsbs.ucl.lan>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft Exchange V6.5
Content-type: multipart/mixed; boundary="Boundary_(ID_VQ/ 
aEKvQHjAdmdemkEt+nw)"
Content-class: urn:content-classes:message
Thread-topic: =?iso-8859-1?Q? 
menus_de_la_semaine_du_15_au_20_d=E9cembre?=
Thread-index: AclcT9T6bxsC0TvWSXWGMBdltMBdCg==
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
X-AV-Checked: ClamAV using ClamSMTP
X-SGSI-MailScanner-ID: 9132FEB69D.EA3EE
X-SGSI-MailScanner: Found to be clean
X-SGSI-SpamCheck: polluriel, SpamAssassin (not cached, score=9.216,  
requis 5,
	BAYES_00 -1.60, BOTNET_BADDNS 2.50, BOTNET_CLIENT 1.50,
	BOTNET_CLIENTWORDS 1.50, BOTNET_IPINHOSTNAME 1.50, HELO_LH_HOME 3.71,
	HTML_MESSAGE 0.00, RDNS_NONE 0.10)
X-SGSI-Spam-Score: sssssssss
X-SGSI-Spam-Status: Yes


Why ?

-- 
Pascal








More information about the MailScanner mailing list