Hi, Thanks for your reply. I replied with the answer to my problems to another post, It was caused by an odd USER_IN_WHITELIST definition in the openprotect sa-update channel.
Removing there rules and setting up my own script sorted it out. Cheers, Mark On Mon, Apr 02, 2007 at 12:49:18PM -0400, Bowie Bailey wrote: > Mark Adams wrote: > > Ok, Fair enough.. I will change this listing to a whitelist_from_rcvd > > as I assume this list is farmed by spammers. (Should be using that > > always of course!) > > > > Header below. > > > > Envelope-to: [EMAIL PROTECTED] > > Received: from hopnet.hopkins.co.uk ([10.0.0.23] > > helo=mail.hopkins.co.uk) by hopkins.co.uk with esmtp (Exim > > 4.63) (envelope-from <[EMAIL PROTECTED]>) > > id 1HWSt9-0005j0-CG > > for [EMAIL PROTECTED]; Wed, 28 Mar 2007 08:48:11 +0100 > > Received: from [195.110.64.125] (helo=smtp.uk.colt.net) > > by mail.hopkins.co.uk with esmtp (Exim 4.63) > > (envelope-from <[EMAIL PROTECTED]>) > > id 1HWSt4-0005FR-5z > > for [EMAIL PROTECTED]; Wed, 28 Mar 2007 08:48:11 +0100 > > Received: from mail.pdcmltd.co.uk (unknown [213.86.218.37]) > > by smtp.uk.colt.net (Postfix) with ESMTP > > id 721B2126151; Wed, 28 Mar 2007 08:42:47 +0100 (BST) > > Content-Class: urn:content-classes:message > > Content-Transfer-Encoding: 7bit > > Subject: Bury St Edmunds - Unit SU34 > > Importance: normal > > Priority: normal > > MIME-Version: 1.0 > > Content-Type: multipart/alternative; > > boundary="----_=_NextPart_001_01C7710E.58A560A4" > > Date: Wed, 28 Mar 2007 08:54:43 +0100 > > Message-ID: > > <[EMAIL PROTECTED]> > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.607 > > X-MS-Has-Attach: > > X-MS-TNEF-Correlator: > > Thread-Topic: Bury St Edmunds - Unit SU34 > > thread-index: AcdxDTLGeReHjG9FQsG+HfB3+1kiMg== > > From: "Guy Graham" <[EMAIL PROTECTED]> > > To: "James Stonard" <[EMAIL PROTECTED]>, > > "Steve Sawyer" <[EMAIL PROTECTED]>, > > <[EMAIL PROTECTED]>, > > <[EMAIL PROTECTED]>, > > "Lindsay,Peter" <[EMAIL PROTECTED]>, > > "Tony White" <[EMAIL PROTECTED]> > > Cc: "Ivan Stephenson" <[EMAIL PROTECTED]> > > X-Spam-Score: 40 > > X-Spam-Report: hits=4.0 required=5.0 test=NO_RDNS,VOWEL_ > > X-Original-Recipient: [EMAIL PROTECTED] > > > > This is a multi-part message in MIME format. > > > > .... > > > > whitelist.cf contents: > > > > whitelist_from [EMAIL PROTECTED] > > I added your whitelist line to my local.cf, saved these headers in a > file and tested. > > $ spamassassin -t < testmsg.txt > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > 1.6 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters > -100 USER_IN_WHITELIST From: address is in the user's white-list > > I'm not sure what's happening for you, but this hits just fine for me. > > -- > Bowie