<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7601.17744"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV>I attempted this rule but while it passes the regex test, it doesn't every show up on the spamassasin list as matching.</DIV>
<DIV> </DIV>
<DIV># Rule to find Whitelist Blackberry mail<BR>header FROM_BLACKBERRY From =~ /\.*\.us\.blackberry\.com/<BR>score FROM_BLACKBERRY -10<BR>describe FROM_BLACKBERRY email From blackberry user<BR></DIV>
<DIV>Gary<BR><BR>>>> Scott Silva <ssilva@sgvwater.com> 1/4/2013 11:10 AM >>><BR>on 1/4/2013 6:49 AM Gary Faith spake the following:<BR>> I am attempting to whitelist e-mail from blackberry servers but not having any<BR>> success. Since I read that MailScanner bases the whtelist on the envelope,<BR>> here is the envelope (I changed the e-mail address):<BR>> <BR>> EHLO smtp02.bis6.us.blackberry.com<BR>> MAIL FROM:<SRS0=+AiNi2=K5=mydomain.net=user@srs.bis6.us.blackberry.com<BR>> <mailto:SRS0=+AiNi2=K5=mydomain.net=user@srs.bis6.us.blackberry.com>> SIZE=876<BR>> RCPT TO:user@mydomain.net <mailto:TO:user@mydomain.net>( mailto:user@mydomain.net)<BR>> Return-Path: <Â g><BR>> Received: from smtp07.bis6.us.blackberry.com (smtp07.bis6.us.blackberry.com<BR>> [74.82.85.7])<BR>> by mscan.asdmonline.net (8.13.6/8.13.6/SuSE Linux 0.8) with ESMTP id<BR>> r04EPuc6025687<BR>> <BR>> I have tried whitelisting via Mailwatch:<BR>> <BR>> @srs.bis6.us.blackberry.com default<BR>> *@*.*.us.blackberry.com <mailto:*@*.*.us.blackberry.com> default<BR>> 74.82.85. default<BR>> <BR>> with no success. I even tried to whitelist in the MailScanner rule file<BR>> (spam.whitelist.rules):<BR>> <BR>> mscan:/etc/MailScanner/rules # cat spam.whitelist.rules<BR>> # If you are basing a blacklist on this then you can refer to<BR>> # a null (empty) sender address with "/^$/" as the address to match.<BR>> #<BR>> # This is where you can build a Spam WhiteList<BR>> # Addresses matching in here, with the value<BR>> # "yes" will never be marked as spam.<BR>> #From: 152.78. yes<BR>> #From: 130.246. yes<BR>> #From: host:soton.ac.uk yes # Note this is slower than using the IP<BR>> From: 74.82.85. yes<BR>> FromOrTo: default no<BR>> <BR>> and the message keep getting scanned and blocked:<BR>> <BR>> <BR>> Score Matching Rule Description<BR>> -0.50 BAYES_00 Bayesian spam probability is 0 to 1%<BR>> 2.00 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)<BR>> 2.00 DIGEST_MULTIPLE Message hits more than one network digest check<BR>> 2.50 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)<BR>> 1.53 RATWARE_EFROM Bulk email fingerprint (envfrom) found<BR>> -0.00 SPF_PASS SPF: sender matches SPF record<BR>> <BR>> <BR>> <BR>> I am running MailScanner version 4.83.4 on SLES 10 64-bit. I don't know where<BR>> to go from here.<BR>> <BR>> Gary<BR>> <BR>> <BR>You can try something like this in spam.assassin.prefs.com;<BR><BR>header FROM_BLACKBERRYFrom =~ /\@blackberry\./<BR>describe FROM_BLACKBERRYemail From blackberry user<BR>score FROM_BLACKBERRY-20<BR><BR><BR>adjust the score accordingly. You might have to play with the regex a little<BR>til it works for you.<BR><BR><BR><BR><BR></DIV></BODY></HTML>