<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35">
<TITLE>RE: How to properly whitelist.</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>You need to add:</FONT>
<BR><FONT SIZE=2>From: *@greenpeace.nl yes</FONT>
</P>
<P><FONT SIZE=2>You entry only covers hosts or subdomains at greenpeace.nl.</FONT>
</P>
<P><FONT SIZE=2>Such as whoever@somehost.greenpeace.nl</FONT>
</P>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Remco Barendse [<A HREF="mailto:mailscanner@barendse.to">mailto:mailscanner@barendse.to</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, December 17, 2002 5:07 PM</FONT>
<BR><FONT SIZE=2>To: MAILSCANNER@jiscmail.ac.uk</FONT>
<BR><FONT SIZE=2>Subject: Re: How to properly whitelist.</FONT>
</P>
<BR>
<P><FONT SIZE=2>Aaaargh!! It's still not working as I would expect.</FONT>
</P>
<P><FONT SIZE=2>I have this in MailScanner.conf</FONT>
<BR><FONT SIZE=2>Is Definitely Not Spam = /etc/MailScanner/rules/spam.whitelist.rules</FONT>
<BR><FONT SIZE=2>/etc/MailScanner/rules/spam.whitelist.rules contains:</FONT>
<BR><FONT SIZE=2>From: *@*.greenpeace.nl yes</FONT>
<BR><FONT SIZE=2>FromTo: default no</FONT>
<BR><FONT SIZE=2>(with TABS in between the columns)</FONT>
</P>
<P><FONT SIZE=2>And this is what I got in pine:</FONT>
</P>
<P><FONT SIZE=2>Date: Tue, 10 Dec 2002 14:39:44 +0100</FONT>
<BR><FONT SIZE=2>From: "news@greenpeace.nl" <news@greenpeace.nl></FONT>
<BR><FONT SIZE=2>To: <xxx@barendse.to></FONT>
<BR><FONT SIZE=2>Subject: {Spam?} E-mail actie: wrakke tankers uit de vaart!</FONT>
</P>
<P><FONT SIZE=2>Where am I going wrong?</FONT>
</P>
<P><FONT SIZE=2>When I start adding the domains that the message has gone through as they</FONT>
<BR><FONT SIZE=2>appear in the maillog things sometimes seem to work. But adding the domain</FONT>
<BR><FONT SIZE=2>of the e-mail address as presented to you doesn't do the trick. Could that</FONT>
<BR><FONT SIZE=2>be a bug in MailScanner?</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>On Mon, 9 Dec 2002, Julian Field wrote:</FONT>
</P>
<P><FONT SIZE=2>> At 21:43 09/12/2002, you wrote:</FONT>
<BR><FONT SIZE=2>> >Hmm, I still don't quite get it, now I'm totally lost :)</FONT>
<BR><FONT SIZE=2>> ></FONT>
<BR><FONT SIZE=2>> >I included the following line in my spam.whitelist.rules list:</FONT>
<BR><FONT SIZE=2>> >From: klm.com yes</FONT>
<BR><FONT SIZE=2>> >Why doesn't this rule include any possible combination of e-mail</FONT>
<BR><FONT SIZE=2>> >adresses and hosts within the klm.com domain? I'd think that by</FONT>
<BR><FONT SIZE=2>> >whitelisting klm.com I would have whitelisted both whoever@klm.com</FONT>
<BR><FONT SIZE=2>> >as well as whoever@wherever.klm.com</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> No, "klm.com" is shorthand for</FONT>
<BR><FONT SIZE=2>> *@klm.com</FONT>
<BR><FONT SIZE=2>> If you want to whitelist all hosts within the klm.com domain, then you need</FONT>
<BR><FONT SIZE=2>> to add a rule matching</FONT>
<BR><FONT SIZE=2>> *@*.klm.com</FONT>
<BR><FONT SIZE=2>> as well.</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> >What would I need to add to get a wildcard like *@*.klm.com ?</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> Exactly that:</FONT>
<BR><FONT SIZE=2>> *@*.klm.com</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> >Maybe it's a good idea to give ample examples in the rules list that is</FONT>
<BR><FONT SIZE=2>> >included in mailscanner by default as there seem to be quite a few</FONT>
<BR><FONT SIZE=2>> >questions about it?</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> It's okay once you get the hang of it :-)</FONT>
<BR><FONT SIZE=2>> But point taken. Have you read the "EXAMPLES" and "README" files in the</FONT>
<BR><FONT SIZE=2>> rules directory provided in the distribution? Did they help? All</FONT>
<BR><FONT SIZE=2>> contributions of things to add to these files would be most welcome.</FONT>
<BR><FONT SIZE=2>> --</FONT>
<BR><FONT SIZE=2>> Julian Field</FONT>
<BR><FONT SIZE=2>> www.MailScanner.info</FONT>
<BR><FONT SIZE=2>> MailScanner thanks transtec Computers for their support</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>></FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>--</FONT>
<BR><FONT SIZE=2>This message has been scanned for viruses and</FONT>
<BR><FONT SIZE=2>dangerous content by MailScanner, and is</FONT>
<BR><FONT SIZE=2>believed to be clean.</FONT>
</P>
<CODE><FONT SIZE=3><BR>
<BR>
.<BR>
</FONT></CODE>
<CODE><FONT SIZE=3><BR>
<BR>
This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses<BR>
***********************************************************************************<BR>
</FONT></CODE>
</BODY>
</HTML>