<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7601.17744"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV>These entries</DIV>
<DIV> </DIV>
<DIV><FONT color=#0000ff>>> @srs.bis6.us.blackberry.com default<BR>>> <A href="mailto:*@*.*.us.blackberry.com">*@*.*.us.blackberry.com</A> default<BR>>> 74.82.85. default<BR></FONT><BR>were cut and pasted from the mailwatch whitelist. Something went wrong when I pasted the info from the spam.whitelist.rules. It should have been this. Sorry for the confusion.</DIV>
<DIV> </DIV>
<DIV><EM># If you are basing a blacklist on this then you can refer to<BR># a null (empty) sender address with "/^$/" as the address to match.<BR>#<BR># This is where you can build a Spam WhiteList<BR># Addresses matching in here, with the value<BR># "yes" will never be marked as spam.<BR>#From: 152.78. yes<BR>#From: 130.246. yes<BR>#From: host:soton.ac.uk yes # Note this is slower than using the IP<BR></EM><EM><FONT color=#0000ff>From: 74.82.85. yes<BR></FONT>FromOrTo: default no<BR></EM></DIV>
<DIV>After testing, I realized that I use either the SQL whitelist or the file based rules.</DIV>
<DIV> </DIV>
<DIV>#Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules<BR>Is Definitely Not Spam = &SQLWhitelist<BR></DIV>
<DIV>I finally figured out the entry to whitelist in the spam.whitelist.rules works but the entry to whitelist in the SQL whitelist doesn't. So maybe there is something wrong with the SQL table. Not sure, need to test some more.</DIV>
<DIV> </DIV>
<DIV>Gary</DIV>
<DIV><BR>>>> Alex Neuman <alex@vidadigital.com.pa> 1/4/2013 12:43 PM >>><BR>Plus you have the syntax wrong.<BR><BR>From: .blackberry.com yes<BR><BR>... in /etc/MailScanner/rules/spam.whitelist.rules should work.<BR><BR>I don't know why you think "from something default" makes any sense,<BR>"from something yes" as an answer to the question "is this<BR>whitelisted" makes more sense, since the default is "no".<BR><BR>On Fri, Jan 4, 2013 at 11:10 AM, Scott Silva <ssilva@sgvwater.com> wrote:<BR>> on 1/4/2013 6:49 AM Gary Faith spake the following:<BR>>> I am attempting to whitelist e-mail from blackberry servers but not having any<BR>>> success. Since I read that MailScanner bases the whtelist on the envelope,<BR>>> here is the envelope (I changed the e-mail address):<BR>>><BR>>> EHLO smtp02.bis6.us.blackberry.com<BR>>> MAIL FROM:<SRS0=+AiNi2=K5=mydomain.net=user@srs.bis6.us.blackberry.com<BR>>> <mailto:SRS0=+AiNi2=K5=mydomain.net=user@srs.bis6.us.blackberry.com>> SIZE=876<BR>>> RCPT TO:user@mydomain.net <mailto:TO:user@mydomain.net>( mailto:user@mydomain.net)<BR>>> Return-Path: <Â g><BR>>> Received: from smtp07.bis6.us.blackberry.com (smtp07.bis6.us.blackberry.com<BR>>> [74.82.85.7])<BR>>> by mscan.asdmonline.net (8.13.6/8.13.6/SuSE Linux 0.8) with ESMTP id<BR>>> r04EPuc6025687<BR>>><BR>>> I have tried whitelisting via Mailwatch:<BR>>><BR>>> @srs.bis6.us.blackberry.com default<BR>>> *@*.*.us.blackberry.com <mailto:*@*.*.us.blackberry.com> default<BR>>> 74.82.85. default<BR>>><BR>>> with no success. I even tried to whitelist in the MailScanner rule file<BR>>> (spam.whitelist.rules):<BR>>><BR>>> mscan:/etc/MailScanner/rules # cat spam.whitelist.rules<BR>>> # If you are basing a blacklist on this then you can refer to<BR>>> # a null (empty) sender address with "/^$/" as the address to match.<BR>>> #<BR>>> # This is where you can build a Spam WhiteList<BR>>> # Addresses matching in here, with the value<BR>>> # "yes" will never be marked as spam.<BR>>> #From: 152.78. yes<BR>>> #From: 130.246. yes<BR>>> #From: host:soton.ac.uk yes # Note this is slower than using the IP<BR>>> @srs.bis6.us.blackberry.com default<BR>>> *@*.*.us.blackberry.com <mailto:*@*.*.us.blackberry.com> default<BR>>> 74.82.85. default<BR>>> FromOrTo: default no<BR>>><BR>>> and the message keep getting scanned and blocked:<BR>>><BR>>><BR>>> Score Matching Rule Description<BR>>> -0.50 BAYES_00 Bayesian spam probability is 0 to 1%<BR>>> 2.00 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)<BR>>> 2.00 DIGEST_MULTIPLE Message hits more than one network digest check<BR>>> 2.50 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)<BR>>> 1.53 RATWARE_EFROM Bulk email fingerprint (envfrom) found<BR>>> -0.00 SPF_PASS SPF: sender matches SPF record<BR>>><BR>>><BR>>><BR>>> I am running MailScanner version 4.83.4 on SLES 10 64-bit. I don't know where<BR>>> to go from here.<BR>>><BR>>> Gary<BR>>><BR>>><BR>> You can try something like this in spam.assassin.prefs.com;<BR>><BR>> header FROM_BLACKBERRY From =~ /\@blackberry\./<BR>> describe FROM_BLACKBERRY email From blackberry user<BR>> score FROM_BLACKBERRY -20<BR>><BR>><BR>> adjust the score accordingly. You might have to play with the regex a little<BR>> til it works for you.<BR>><BR>><BR>><BR>><BR>><BR>> --<BR>> MailScanner mailing list<BR>> mailscanner@lists.mailscanner.info<BR>> <A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR>><BR>> Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR>><BR>> Support MailScanner development - buy the book off the website!<BR>><BR><BR><BR><BR>-- <BR><BR>--<BR><BR>Alex Neuman van der Hans<BR>Reliant Technologies / Vida Digital<BR><A href="http://vidadigital.com.pa/">http://vidadigital.com.pa/</A><BR><BR>+507-6781-9505<BR>+507-832-6725<BR>+1-440-253-9789 (USA)<BR><BR>Follow @AlexNeuman on Twitter<BR><A href="http://facebook.com/vidadigital">http://facebook.com/vidadigital</A><BR><BR><BR>-- So-called "legal disclaimers" are not legally binding, so don't<BR>bother. A cute graphic saying "save the planet, don't print this" can<BR>potentially create more CO2, not less, so don't bother either.<BR>-- <BR>MailScanner mailing list<BR>mailscanner@lists.mailscanner.info<BR><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR><BR>Support MailScanner development - buy the book off the website! <BR></DIV></BODY></HTML>