Dan McDonald points out that gadental.org has a mismatched rDNS and posits that is the reason whitelist_from_rcvd fails. So, here is a different email with the same symptom, but with matched rDNS.
[EMAIL PROTECTED]:~$ dig -x 169.200.184.174 174.184.200.169.in-addr.arpa. 3600 IN PTR sls-sn-smtp-pmail3.wachovia.com. [EMAIL PROTECTED]:~$ dig sls-sn-smtp-pmail3.wachovia.com sls-sn-smtp-pmail3.wachovia.com. 3597 IN A 169.200.184.174 User_Prefs not needed, whitelist_from_rcvd * wachovia.com is in local.cf (full listing at http://www.visioncomm.net/temp/080104Local.txt): Headers (full mail http://www.visioncomm.net/temp/080104Email2.txt): X-Envelope-From:<[EMAIL PROTECTED]> Received: from sls-sn-smtp-pmail3.wachovia.com [169.200.184.174] by mail.visioncomm.net with ESMTP (SMTPD32-8.15) id A1253F3B0064; Wed, 02 Jan 2008 03:53:57 -0500 Received: from p9mpw011 (p9mpw011.csm.fub.com [172.21.194.240]) by sls-sn-smtp-pmail3.wachovia.com (8.11.7p3+Sun/8.9.0) with ESMTP id m028ruM17943 for <[EMAIL PROTECTED]>; Wed, 2 Jan 2008 03:53:56 -0500 (EST) Message-ID: <[EMAIL PROTECTED]> Date: Wed, 2 Jan 2008 03:53:56 -0500 (EST) From: Wachovia Alerts <[EMAIL PROTECTED]> ... Debug (full listing http://www.visioncomm.net/temp/080104Debug2.txt): Report: X-Spam-Status: No, score=-5.1 required=5.0 tests=BAYES_00=-2.599, HTML_MESSAGE=0.001,MIME_HTML_ONLY=1.457,RCVD_IN_DNSWL_MED=-4 autolearn=unavailable version=3.2.3 Tia [again] Dan -----Original Message----- From: McDonald, Dan [mailto:[EMAIL PROTECTED] Sent: Friday, January 04, 2008 9:22 AM To: users@spamassassin.apache.org Subject: Re: Whitelist_from_rcvd not working On Fri, 2008-01-04 at 09:12 -0500, Dan Barker wrote: > My whitelist_from_rcvd tags don't hit. I believe this has been > happening since my upgrade from 3.1.7 to 3.2.3. > > I don't see anything "interesting" in -D, but I can get it to show an > error if I mis-spell it whitelist_fxxxrom_rcvd, so I know (besides the > debug lines saying so) it's parsing my User_Prefs. > > Maybe my MTA is formatting the received lines in an un-understandable > way? I don't know where to look besides: > > User_Prefs: > > whitelist_from_rcvd [EMAIL PROTECTED] gadental.org Whitelist_from_rcvd only works when the forward and reverse addresses match. That's to keep spammers from publishing whatever reverse address they want (because they are authoritative for the reverse zone) and sneaking right through your whitelist... If gadental is unwilling to fix their reverse zone, you might ask them to publish an SPF record and then use whitelist_from_spf instead.... -- Daniel J McDonald, CCIE #2495, CISSP #78281, CNX Austin Energy http://www.austinenergy.com
