Hi,
I'm  running ASSP version 2.3.3(13276) on perl 5, version 14, subversion 2 on 
Windows Server 2008R2. I'm getting mail blocked from whitelisted senders. Here 
is the log:

Oct-08-13 08:57:24 47844-07354 [Worker_1] 70.168.48.18 
<[email protected]> info: found message size announcement: 14.18 
kByte
Oct-08-13 08:57:24 47844-07354 [Worker_1] 70.168.48.18 
<[email protected]> Message-Score: added 39 (fiphValencePB) for 
Suspicious HELO - contains IP: 'wsip-70-168-48-17.sd.sd.cox.net', total score 
for this message is now 39
Oct-08-13 08:57:24 47844-07354 [Worker_1] 70.168.48.18 
<[email protected]> [scoring] (Suspicious HELO - contains IP: 
'wsip-70-168-48-17.sd.sd.cox.net')
Oct-08-13 08:57:24 47844-07354 [Worker_1] 70.168.48.18 
<[email protected]> Message-Score: added 60 (fiphmValencePB) for 
IP in HELO 'wsip-70-168-48-17.sd.sd.cox.net' does not match IP in connection 
'70.168.48.18' , total score for this message is now 99
Oct-08-13 08:57:24 47844-07354 [Worker_1] 70.168.48.18 
<[email protected]> [scoring] (IP in HELO 
'wsip-70-168-48-17.sd.sd.cox.net' does not match IP in connection 
'70.168.48.18' )
Oct-08-13 08:57:24 47844-07354 [Worker_1] [MessageLimit] 70.168.48.18 
<[email protected]> to: [email protected] [spam found] 
(MessageScore 99, limit 50) [FW Southland Electric inc] -> 
c:/assp/spam/7354.eml;
Oct-08-13 08:57:25 47844-07354 [Worker_1] 70.168.48.18 
<[email protected]> to: [email protected] [SMTP Error] 554 
5.7.1 Mail appears to be unsolicited -- send error reports to 
[email protected]

Here is the email header:
From: Sender <[email protected]>
To: "[email protected]" <[email protected]>
Date: Tue, 8 Oct 2013 08:57:15 -0700
Subject: [MessageLimit] FW: Southland Electric inc.
Thread-Topic: Southland Electric inc.
Thread-Index: Ac7Daqhqwuknor9fSHO+nfpu3GXcWAA1ENGA
Message-ID: 
<F96D8FE3B006DF4997D1A433B118B35F1AB0AF2D88@SERVEREXCH.southland.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-vipre-scanned: 051BF8CA0056B0051BFA17
acceptlanguage: en-US
Content-Type: multipart/alternative;
        boundary="_000_F96D8FE3B006DF4997D1A433B118B35F1AB0AF2D88SERVEREXCHsou_"
MIME-Version: 1.0
X-Assp-Version: 2.3.3(13276) on Sparling.ASSP
X-Assp-ID: Sparling.ASSP 47844-07354
X-Assp-Session: 5BD67B0C (mail 1)
X-Assp-Envelope-From: [email protected]
X-Assp-Message-Score: 39 (Suspicious HELO - contains IP: 
'wsip-70-168-48-17.sd.sd.cox.net')
X-Assp-IP-Score: 39 (Suspicious HELO - contains IP: 
'wsip-70-168-48-17.sd.sd.cox.net')
X-Assp-Message-Score: 60 (IP in HELO 'wsip-70-168-48-17.sd.sd.cox.net' does
        not match IP in connection '70.168.48.18' )
X-Assp-IP-Score: 60 (IP in HELO 'wsip-70-168-48-17.sd.sd.cox.net' does not
        match IP in connection '70.168.48.18' )
X-Assp-Delay: not delayed (whitelisted); 8 Oct 2013 08:57:24 -0700
X-Assp-Whitelisted: Yes (whitelistdb)
X-Assp-Tag: MessageLimit
X-Assp-allLoveATSpam: 2
X-Assp-Spam: YES
X-ASSPSpam-Status: yes
X-Assp-Spam-Reason: MessageScore 99, limit 50
X-Assp-Message-Totalscore: 99
X-Assp-Spam-Level: ********************
X-Assp-Intended-For: [email protected]
X-Assp-Copy-Spam: Yes
Return-Path: [email protected]
X-MS-Exchange-Organization-AuthSource: colmbx01.corp.sparling.com
X-MS-Exchange-Organization-AuthAs: Anonymous

The header notes that the sender is in the whitelist, but the log makes no 
mention of it. How can I ensure that whitelisted senders are not blocked?

...Tim


------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to