The server runs postfix+amavisd and I believe the whitelisting takes place from the amavisd config. I'm unable to figure out how though, the config is pretty out-of-the-box.
Please note that spams that slip through has the sender user part is same as a user in our system (not the domain part). The sender obviously sets this in his end.
Grateful for any advice,
Per olof
Mail headers as follows:
From - Fri Oct 03 14:44:24 2003
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <[EMAIL PROTECTED]>
Received: from terrapin.inter-sonic.com ([172.16.1.12]) by
penguin.inter-sonic.com (Netscape Messaging Server 4.15) with
ESMTP id HM6LZS00.E4A for <[EMAIL PROTECTED]>; Fri, 3 Oct 2003
14:43:04 +0200
Received: from localhost (localhost.inter-sonic.com [127.0.0.1])
by terrapin.inter-sonic.com (Postfix) with ESMTP id D33DA20D60
for <[EMAIL PROTECTED]>; Fri, 3 Oct 2003 14:43:03 +0200 (CEST)
Received: from terrapin.inter-sonic.com ([127.0.0.1])
by localhost (terrapin.inter-sonic.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 18576-04 for <[EMAIL PROTECTED]>;
Fri, 3 Oct 2003 14:43:02 +0200 (CEST)
Received: from AMDAthlon1700 (sk195.neoplus.adsl.tpnet.pl [80.50.123.195])
by terrapin.inter-sonic.com (Postfix) with SMTP id 3A5E120D5F
for <[EMAIL PROTECTED]>; Fri, 3 Oct 2003 14:42:51 +0200 (CEST)
Received: from smtp1.nix.paypal.com (paypal.com [64.4.240.74])
by 192.168.0.6 (8.11.6/8.12.6) with ESMTP id h24073EHMv24073
for <[EMAIL PROTECTED]>; Fri, 3 Oct 2003 14:42:39 +0200
Message-ID: <[EMAIL PROTECTED]>
From: "PDoc" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: make it bigger quickly now (penis)
Date: Fri, 3 Oct 2003 14:42:39 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0009_5E095E09.5E095E09"
X-Virus-Scanned: by amavisd-new at inter-sonic.com
X-Spam-Status: No, hits=-95.7 tagged_above=-999.0 required=4.4
tests=BASE64_ENC_TEXT, BAYES_90, HTML_70_80, HTML_TAG_BALANCE_TABLE,
MIME_HTML_ONLY, MIME_MISSING_BOUNDARY, PENIS_ENLARGE, RCVD_IN_BONDEDSENDER,
USER_IN_WHITELIST
X-Spam-Level:
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
