So I took a look at how I do this on Mailborder servers. In short, it looks like this:<div><br></div><div><div># Built by Mailborder Systems</div><div># Build Time: Fri, 04 Jan 2013 18:20:02 UTC</div><div>From: 127.0.0.1 yes</div>
<div>From: <a href="mailto:linus@torvalds.com">linus@torvalds.com</a> yes</div><div>From: *@<a href="http://foo.com">foo.com</a> yes</div><div>FromOrTo: default no</div><div><br></div><div>By default I add 127.0.0.1 to any system generated messages (logwatch, etc.) does not get nailed as spam regardless of content. I noticed your example below that it is only a partial IP address. Have you tried full addresses? Also, make sure that your whitelist is specified within the MailScanner.conf, or create your own config file in the MailScanner/conf.d to make sure it never gets overwritten with upgrades. </div>
<div><br></div><div><br></div><div>Jerry Benton</div><div><a href="http://www.mailborder.com">www.mailborder.com</a></div><div><br></div><div><br></div><br><div class="gmail_quote">On Fri, Jan 4, 2013 at 3:49 PM, Gary Faith <span dir="ltr"><<a href="mailto:gafaith@asdm.net" target="_blank">gafaith@asdm.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="MARGIN:4px 4px 1px;FONT:10pt Segoe UI"><span style="font:10pt Segoe UI">I am attempting to whitelist e-mail from blackberry servers but not having any success. Since I read that MailScanner bases the whtelist on the envelope, here is the envelope (I changed the e-mail address):<br>
<br></span><span style="font:italic 10pt Segoe UI">EHLO <a href="http://smtp02.bis6.us.blackberry.com" target="_blank">smtp02.bis6.us.blackberry.com</a><br>MAIL FROM:<</span><span style="FONT:italic 10pt Segoe UI;COLOR:#ff0000;TEXT-DECORATION:underline"><a href="mailto:SRS0=+AiNi2=K5=mydomain.net=user@srs.bis6.us.blackberry.com" target="_blank">SRS0=+AiNi2=K5=mydomain.net=user@srs.bis6.us.blackberry.com</a></span><span style="font:italic 10pt Segoe UI">> SIZE=876<br>
RCPT </span><span style="FONT:italic 10pt Segoe UI;COLOR:#ff0000;TEXT-DECORATION:underline"><a href="mailto:TO:user@mydomain.net" target="_blank">TO:user@mydomain.net</a></span><span style="font:italic 10pt Segoe UI"> ( </span><span style="FONT:italic 10pt Segoe UI;COLOR:#ff0000;TEXT-DECORATION:underline"><a href="mailto:user@mydomain.net" target="_blank">mailto:user@mydomain.net</a></span><span style="font:italic 10pt Segoe UI"> )<br>
Return-Path: < g><br>Received: from <a href="http://smtp07.bis6.us.blackberry.com" target="_blank">smtp07.bis6.us.blackberry.com</a> (<a href="http://smtp07.bis6.us.blackberry.com" target="_blank">smtp07.bis6.us.blackberry.com</a> [74.82.85.7])<br>
by <a href="http://mscan.asdmonline.net" target="_blank">mscan.asdmonline.net</a> (8.13.6/8.13.6/SuSE Linux 0.8) with ESMTP id r04EPuc6025687<br></span><span style="font:10pt Segoe UI"><br>I have tried whitelisting via Mailwatch:<br>
<br></span><span style="font:italic 10pt Segoe UI">@<a href="http://srs.bis6.us.blackberry.com" target="_blank">srs.bis6.us.blackberry.com</a> default<br></span><span style="FONT:italic 10pt Segoe UI;COLOR:#ff0000;TEXT-DECORATION:underline"><a href="mailto:*@*.*.us.blackberry.com" target="_blank">*@*.*.us.blackberry.com</a></span><span style="FONT:italic 10pt Segoe UI;COLOR:#ff0000"> </span><span style="font:italic 10pt Segoe UI">default<br>
74.82.85. default <br></span><span style="font:10pt Segoe UI"><br></span><span style="font:10pt Segoe UI">with no success. I even tried to whitelist in the MailScanner rule file (spam.whitelist.rules):</span><span style="font:10pt Segoe UI"><br>
<br></span><span style="font:italic 10pt Segoe UI">mscan:/etc/MailScanner/rules # cat spam.whitelist.rules<br># If you are basing a blacklist on this then you can refer to<br># a null (empty) sender address with "/^$/" as the address to match.<br>
#<br># This is where you can build a Spam WhiteList<br># Addresses matching in here, with the value<br># "yes" will never be marked as spam.<br>#From: 152.78. yes<br>#From: 130.246. yes<br>
#From: host:<a href="http://soton.ac.uk" target="_blank">soton.ac.uk</a> yes # Note this is slower than using the IP<br>From: 74.82.85. yes<br>FromOrTo: default no<br></span><span style="font:10pt Segoe UI"><br>
</span><span style="font:10pt Segoe UI">and the message keep getting scanned and blocked:</span><span style="font:10pt Segoe UI"><br><br></span><span style="font:10pt Segoe UI"><br>
<table border="0" cellspacing="2" cellpadding="1" width="100%">
<thead>
<tr>
<th>Score</th>
<th>Matching Rule</th>
<th>Description</th></tr></thead>
<tbody>
<tr>
<td align="left">-0.50</td>
<td width="200">BAYES_00</td>
<td>Bayesian spam probability is 0 to 1%</td></tr>
<tr>
<td align="left">2.00</td>
<td width="200">DCC_CHECK</td>
<td>Listed in DCC (<a href="http://rhyolite.com/anti-spam/dcc/" target="_blank">http://rhyolite.com/anti-spam/dcc/</a>)</td></tr>
<tr>
<td align="left">2.00</td>
<td width="200">DIGEST_MULTIPLE</td>
<td>Message hits more than one network digest check</td></tr>
<tr>
<td align="left">2.50</td>
<td width="200">PYZOR_CHECK</td>
<td>Listed in Pyzor (<a href="http://pyzor.sf.net/" target="_blank">http://pyzor.sf.net/</a>)</td></tr>
<tr>
<td align="left">1.53</td>
<td width="200">RATWARE_EFROM</td>
<td>Bulk email fingerprint (envfrom) found</td></tr>
<tr>
<td align="left">-0.00</td>
<td width="200">SPF_PASS</td>
<td>SPF: sender matches SPF record</td></tr></tbody></table>
<div> </div>
<div> </div>
<div>I am running MailScanner version 4.83.4 on SLES 10 64-bit. I don't know where to go from here.</div><span class="HOEnZb"><font color="#888888">
<div> </div>
<div>Gary</div></font></span></span></div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br></div>