Whitelisting problems

[Mailborder at Gmail]

So I took a look at how I do this on Mailborder servers. In short, it looks
like this:

# Built by Mailborder Systems
# Build Time: Fri, 04 Jan 2013 18:20:02 UTC
From:   127.0.0.1       yes
From:   linus at torvalds.com      yes
From:   *@foo.com       yes
FromOrTo:       default no

By default I add 127.0.0.1 to any system generated messages (logwatch,
etc.) does not get nailed as spam regardless of content. I noticed your
example below that it is only a partial IP address. Have you tried full
addresses? Also, make sure that your whitelist is specified within the
MailScanner.conf, or create your own config file in the MailScanner/conf.d
to make sure it never gets overwritten with upgrades.


Jerry Benton
www.mailborder.com



On Fri, Jan 4, 2013 at 3:49 PM, Gary Faith <gafaith at asdm.net> wrote:

> I am attempting to whitelist e-mail from blackberry servers but not having
> any success.  Since I read that MailScanner bases the whtelist on the
> envelope, here is the envelope (I changed the e-mail address):
>
> EHLO smtp02.bis6.us.blackberry.com
> MAIL FROM:<SRS0=+AiNi2=K5=mydomain.net=user at srs.bis6.us.blackberry.com>
> SIZE=876
> RCPT TO:user at mydomain.net ( mailto:user at mydomain.net <user at mydomain.net> )
> Return-Path: < g>
> Received: from smtp07.bis6.us.blackberry.com (
> smtp07.bis6.us.blackberry.com [74.82.85.7])
>      by mscan.asdmonline.net (8.13.6/8.13.6/SuSE Linux 0.8) with ESMTP id
> r04EPuc6025687
>
> I have tried whitelisting via Mailwatch:
>
> @srs.bis6.us.blackberry.com     default
> *@*.*.us.blackberry.com           default
> 74.82.85.                                 default
>
> with no success.  I even tried to whitelist in the MailScanner rule file
> (spam.whitelist.rules):
>
> mscan:/etc/MailScanner/rules # cat spam.whitelist.rules
> # If you are basing a blacklist on this then you can refer to
> # a null (empty) sender address with "/^$/" as the address to match.
> #
> # This is where you can build a Spam WhiteList
> # Addresses matching in here, with the value
> # "yes" will never be marked as spam.
> #From:          152.78.         yes
> #From:          130.246.        yes
> #From:          host:soton.ac.uk yes # Note this is slower than using the
> IP
> From:           74.82.85.       yes
> FromOrTo:       default         no
>
> and the message keep getting scanned and blocked:
>
>
>   Score Matching Rule Description  -0.50 BAYES_00 Bayesian spam
> probability is 0 to 1% 2.00 DCC_CHECK Listed in DCC (
> http://rhyolite.com/anti-spam/dcc/) 2.00 DIGEST_MULTIPLE Message hits
> more than one network digest check 2.50 PYZOR_CHECK Listed in Pyzor (
> http://pyzor.sf.net/) 1.53 RATWARE_EFROM Bulk email fingerprint (envfrom)
> found -0.00 SPF_PASS SPF: sender matches SPF record
>
>
> I am running MailScanner version 4.83.4 on SLES 10 64-bit.  I don't know
> where to go from here.
>
> Gary
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130104/dc66f109/attachment.html