Host in whitelist but tagged as SPAM

[Alex Neuman van der Hans]

You have no default line.



On Dec 19, 2008, at 5:47 AM, Pascal Maes <pascal.maes at elec.ucl.ac.be>  
wrote:

>
> Hello,
>
> I have the following lines in the file /opt/MailScanner/etc/rules/ 
> spam_whitelist.rules
>
>
> From:    85.201.63.77                    yes
> From:    85.201.63.77/32                    yes
> From:    user-85-201-63-77.static.tvcablenet.be        yes
> From:    uclsbs.ucl.lan                    yes
>
> In MailScanner.conf, I have :
>
> Is Definitely Not Spam = %rules-dir%/spam_whitelist.rules
>
>
> but the following mail comming from 85.201.63.77 has been tagged as  
> spam :
>
> Received: from uclsbs.ucl.lan (unknown [85.201.63.77])
> by smtp1.sgsi.ucl.ac.be (Postfix) with ESMTP; Fri,
> 12 Dec 2008 12:50:43 +0100 (CET)
> Date: Fri, 12 Dec 2008 12:50:30 +0100
> Subject: {Spam?} =?iso-8859-1?Q? 
> menus_de_la_semaine_du_15_au_20_d=E9cembre?=
> Message-id: <78AEBC3D06BBD9428F6FC4FAB44118A7136DC5 at uclsbs.ucl.lan>
> MIME-version: 1.0
> X-MIMEOLE: Produced By Microsoft Exchange V6.5
> Content-type: multipart/mixed; boundary="Boundary_(ID_VQ/ 
> aEKvQHjAdmdemkEt+nw)"
> Content-class: urn:content-classes:message
> Thread-topic: =?iso-8859-1?Q? 
> menus_de_la_semaine_du_15_au_20_d=E9cembre?=
> Thread-index: AclcT9T6bxsC0TvWSXWGMBdltMBdCg==
> X-MS-Has-Attach: yes
> X-MS-TNEF-Correlator:
> X-AV-Checked: ClamAV using ClamSMTP
> X-SGSI-MailScanner-ID: 9132FEB69D.EA3EE
> X-SGSI-MailScanner: Found to be clean
> X-SGSI-SpamCheck: polluriel, SpamAssassin (not cached, score=9.216,  
> requis 5,
>    BAYES_00 -1.60, BOTNET_BADDNS 2.50, BOTNET_CLIENT 1.50,
>    BOTNET_CLIENTWORDS 1.50, BOTNET_IPINHOSTNAME 1.50, HELO_LH_HOME  
> 3.71,
>    HTML_MESSAGE 0.00, RDNS_NONE 0.10)
> X-SGSI-Spam-Score: sssssssss
> X-SGSI-Spam-Status: Yes
>
>
> Why ?
>
> -- 
> Pascal
>
>
>
>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!