Joao Gazzoni wrote: > Hello, > > One message have these headers: > From: Sucesu - RS <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Return-Path: [EMAIL PROTECTED] > > And the SA whitelist have this record: > From: [EMAIL PROTECTED] yes
That's not a spamassassin whitelist entry. It's a mailscanner one. SpamAssassin whitelist commands look like: whitelist_from [EMAIL PROTECTED] or: whitelist_from_rcvd [EMAIL PROTECTED] mailserver.sucesu.org.br If your original rule is in your spam.assassin.prefs.conf, local.cf or any other SpamAssassin file. remove it. If it's in your /etc/MailScanner/rules/spam.whitelist.rules, then you're fine, but this becomes a MailScanner question, not a SA question. > > But SA action is: > Jun 24 00:03:05 MailScanner[14910]: Message j5O31n4N016061 from > ([EMAIL PROTECTED]) to mydomain.com is spam, (escore=14.85) > > Why SA uses "Return-Path" field instead "From" field, to perform > whitelist checks? There is some whitelist configuration mistake? SA does both, but SA isn't what you're configuring MailScanner is. MailScanner only does the return path because MailScanner only examines the envelope. (Technically MailScanner uses the value that will go into Return-Path, but before the Return-Path header is created) > > Thanks for any suggestion. > Move the discussion to the mailscanner mailing list if you have more questions about mailscanner's whitelisting system. If you've got questions about SA's whitelists, then follow up here.