Re: [SAtalk] erroneous hits on whitelist by odd languages?

2004-01-09 Thread Alex van den Bogaerdt
On Fri, Jan 09, 2004 at 11:16:29AM -0800, Clint Byrum wrote:
> Has anyone else seen mail marked as "USER_IN_WHITELIST", but mostly
> contains foreign characters. I've searched the mail for every entry in
> my whitelist, and there's no way any of them have been in my whitelist.
> 
> I've posted them on mywebsite
> 
> http://spamaps.org/files/satalk/
> 
> Now, I found the entry that causes this by a process of trial and error:
> 
> whitelist_from [EMAIL PROTECTED]
> 
> Which would match, if it were checking Envelope-to:

I'm not that fluent in SA's internals but I'll give it a try;

I think it is matching:

   From
   Envelope-Sender
   Resent-Sender
   X-Envelope-From
   Return-Path
   Resent-From

In both example emails:

   Return-path: <[EMAIL PROTECTED]>

HTH
Alex
-- 
begin  sig
http://www.googlism.com/index.htm?ism=alex+van+den+bogaerdt&type=1
This message was produced without any http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


[SAtalk] erroneous hits on whitelist by odd languages?

2004-01-09 Thread Clint Byrum
Has anyone else seen mail marked as "USER_IN_WHITELIST", but mostly
contains foreign characters. I've searched the mail for every entry in
my whitelist, and there's no way any of them have been in my whitelist.

I've posted them on mywebsite

http://spamaps.org/files/satalk/

Now, I found the entry that causes this by a process of trial and error:

whitelist_from [EMAIL PROTECTED]

Which would match, if it were checking Envelope-to:

The only From: line in the mails read like this:

From: =?Big5?B?pcymYQ==?= <[EMAIL PROTECTED]>
From: =?Big5?B?paynxg==?= <[EMAIL PROTECTED]>

Any ideas?

Thanks

-cb



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk