<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>RE: MailScanner and SpamAssassin</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1170" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Yes. None of it matches anything in the
spam.whitelist.rules file. It is a funny thing!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV> </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=dwinkler@ALGORITHMICS.COM
href="mailto:dwinkler@ALGORITHMICS.COM">Derek Winkler</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, June 03, 2003 10:30
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: MailScanner and
SpamAssassin</DIV>
<DIV><BR></DIV>
<P><FONT size=2>Did you check their envelope address versus the
whitelist?</FONT> </P>
<P><FONT size=2>We had a spammer faking their envelope address as someone on
our whitelist.</FONT> </P>
<P><FONT size=2>-----Original Message-----</FONT> <BR><FONT size=2>From: Kris
Zabriskie [<A
href="mailto:zabriskw@itech.net">mailto:zabriskw@itech.net</A>]</FONT>
<BR><FONT size=2>Sent: Tuesday, June 03, 2003 10:21 AM</FONT> <BR><FONT
size=2>To: <A
href="mailto:MAILSCANNER@jiscmail.ac.uk">MAILSCANNER@jiscmail.ac.uk</A></FONT>
<BR><FONT size=2>Subject: MailScanner and SpamAssassin</FONT> </P><BR>
<P><FONT size=2>I am running MailScanner and SpamAssassin, and am VERY pleased
with the</FONT> <BR><FONT size=2>results! All though, I have noticed a
problem, which is probably something</FONT> <BR><FONT size=2>in my
configuration. Every once and awhile some spam will come through
with</FONT> <BR><FONT size=2>a rating of 19 or 21, which is well above the
limit I have set at 5. If you</FONT> <BR><FONT size=2>look in the header
it looks like this:</FONT> </P>
<P><FONT size=2>X-Priority: 1</FONT> <BR><FONT size=2>X-MSMail-Priority:
High</FONT> <BR><FONT size=2>X-MailScanner-Information: Please contact the ISP
for more information</FONT> <BR><FONT size=2>X-MailScanner: Found to be
clean</FONT> <BR><FONT size=2>X-MailScanner-SpamCheck: not spam (whitelisted),
SpamAssassin (score=19.5,</FONT> <BR><FONT
size=2> required 5, ALL_NATURAL,
BANG_EXERCISE, BAYES_90, CLICK_BELOW_CAPS,</FONT> <BR><FONT
size=2> DATE_IN_PAST_06_12,
DRASTIC_REDUCED, FORGED_MUA_OUTLOOK,</FONT> <BR><FONT
size=2> FROM_HAS_MIXED_NUMS,
HTML_40_50, HTML_FONT_BIG,</FONT> <BR><FONT
size=2>HTML_FONT_COLOR_BLUE,</FONT> <BR><FONT
size=2> HTML_FONT_COLOR_RED,
HTML_LINK_CLICK_CAPS, HTML_LINK_CLICK_HERE,</FONT> <BR><FONT
size=2> MANY_EXCLAMATIONS,
MIME_HTML_ONLY, MISSING_MIMEOLE, MLM,</FONT> <BR><FONT
size=2> X_MSMAIL_PRIORITY_HIGH,
X_PRIORITY_HIGH)</FONT> </P>
<P><FONT size=2>Obviously it is getting through because it is
whitelisted. I dont have</FONT> <BR><FONT size=2>these guys whitelisted
anywhere though. Can someone please point me in the</FONT> <BR><FONT
size=2>right direction? Any help, as always, will be GREATLY
appreciated. Thanks!</FONT> </P></BLOCKQUOTE></BODY></HTML>