Why are these being whitelisted?Did you turn on the Auto Whitelist feature? That whitelists sender addresses that appear in the recipient's webmail address book. It doesn't appear to be so in this case, but we've seen problems with users having their own address in their webmail address book, resulting in whitelisting forging spam.
If none of this applies here, I would recheck your whitelist statements. Darin. ----- Original Message ----- From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 9:20 AM Subject: [Declude.JunkMail] Why are these being whitelisted? Just upgraded to 4.3.23. I'm getting a ton of stuff now that is being whitelisted. I have several users whitelisted TO but not the entire domain. This is not one of the users that is whitelisted TO. Suggestions? Here is the header info: Received: from SpeedTouch.lan [83.8.172.182] by cruzaninc.com with ESMTP (SMTPD-9.10) id ABE602AC; Thu, 14 Dec 2006 09:12:54 -0500 Return-Path: <[EMAIL PROTECTED]> Received: from 69.66.1.12 (HELO ca.iowatelecom.net) by todhunter.com with esmtp (*VX))0(RG1 :?1V/X) id AHNCX*-FQHG4D-/M for [EMAIL PROTECTED]; Thu, 14 Dec 2006 14:11:11 -0060 Date: Thu, 14 Dec 2006 14:11:11 -0060 From: "Troy Goddard" <[EMAIL PROTECTED]> X-Mailer: The Bat! (v2.12.00) Personal X-Priority: 3 (Normal) Message-ID: <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Take it easy MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------19C38D386E05E0CA" X-Spam: Not detected X-Declude-Sender: [EMAIL PROTECTED] [83.8.172.182] X-Declude-Spoolname: D5be202f700007bd0.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.23 for spam. "http://www.declude.com/x-note.htm" X-Declude-Scan: Incoming Score [0] at 09:13:20 on 14 Dec 2006 X-Declude-Fail: Whitelisted X-Country-Chain: UNITED STATES->POLAND->destination Precedence: bulk Sender: [EMAIL PROTECTED] X-RCPT-TO: <[EMAIL PROTECTED]> Status: X-UIDL: 465362209 X-IMail-ThreadID: 5c0100000844d46a --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.