Hi,
We have received some email this morning with the From and To
headers like:
From: "" <>
To: [EMAIL PROTECTED]
and it is getting a USER_IN_WHITELIST -100 score. The whitelist rule
causing this is:
whitelist_from [EMAIL PROTECTED]
but if I change the * glob to something like [EMAIL PROTECTED] it fails.
It looks like the wildcard match falls down onto the next line (the To:
address). Can anybody confirm this? Oh, and I know I should really use
the whitelist_from_rcvd rules but I am currently trying to track down
something weird with this too. Want to here about it? Ok. I have these
rules (this is a totally different config from above):
whitelist_from_rcvd [EMAIL PROTECTED] network-one.com
whitelist_from_rcvd [EMAIL PROTECTED] network-two.com
whitelist_from_rcvd [EMAIL PROTECTED] network-three.com
Now, if I send an email from a machine on network-three.com to, say,
[EMAIL PROTECTED] it goes through fine with the expected -100. If
I send it from network-two or network-one then it doesn't. If I change
the rule order to:
whitelist_from_rcvd [EMAIL PROTECTED] network-three.com
whitelist_from_rcvd [EMAIL PROTECTED] network-two.com
whitelist_from_rcvd [EMAIL PROTECTED] network-one.com
then (have you guessed yet?) it gets the -100 from only mail sent from
network-one.com. So as far as I can tell, when an email has been
whitelisted it continues through the list being checked against all the
other rules where the From: header matches and gets marked as false again
if it fails the Received: header test (or it is an associative array
over-write with the address as the key??). Surely this isn't intentional?
If so, can you tell me how I whitelist the same From address from
different Received machines.
As an aside, I did try searching for similar problems before posting, but
have you used the searches? I try to search for 'whitelist_from' in the
aims group search and it changes it to 'whitelist' and in the gmane search
the same query changed into "whitelist from". What on earth is the
thinking behind that? Have I got dirty underscores? They were clean on
this morning.
Thanks
Adam Bowen
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
