Re: USER_IN_WHITELIST problem.

2009-03-24 Thread Matt Kettler
Bug wrote: > Dear users ! > > I`m using exim + spamd + user_prefs in mysql. All works fine. > > But I found a bug, when I`m using whitelist, and header rcpt to: have > address with character description, whitelist failed to catch it in > database. For example: > > 1st message: > spamd: clean messa

Re: USER_IN_WHITELIST problem

2007-01-24 Thread Jonas Eckerman
Sherman Lilly wrote: [Snipped text about forged mail from own domains whitelisted...] > I was looking on the net and I came across a plugin on spamassassin I don't > think i have loaded. Will the SPF plugin help with this problem? If you publish SPF records for your domains, you can use whiteli

Re: USER_IN_WHITELIST problem

2007-01-23 Thread René Berber
Will Nordmeyer wrote: > > René Berber wrote: >> Sherman Lilly wrote: > [snip] >>> I get why they are getting through. They are spoofing the Return-Path. >>> Is there any way to remedy this problem? >> Depends on your server. For sendmail there is: >> >> http://ultra.ap.krakow.pl/~raj/sendmai

Re: USER_IN_WHITELIST problem

2007-01-23 Thread Ryan Pavely
Ok I have an update. I picked a message that was getting marked USER_IN_WHITELIST once every 5 or so messages. I took the from address and added this code to Perl..Mail\SpamAssassin\EvalTests.pm if ($addr =~ qr/$regexp/i) { dbg("rules: address $addr matches whitelist or blacklist rege

Re: USER_IN_WHITELIST problem

2007-01-23 Thread Kelson
Sherman Lilly wrote: I was looking on the net and I came across a plugin on spamassassin I don't think i have loaded. Will the SPF plugin help with this problem? Yes... *if* you replace whitelist_from with whitelist_from_spf Alternatively you can try something like this: whitelist_from_rcvd

Re: USER_IN_WHITELIST problem

2007-01-23 Thread Ryan Pavely
As of last Wednesday I am having this problem. In fact it's more then just USER_IN_WHITELIST, I am getting many reports of incorrect USER_IN_BLACKLIST. No I don't whitelist my domain. Yes I checked the To/From/ReplyTo/EnvelopeFrom/etc. No the users don't have whitelist/blacklist entries anywhe

RE: USER_IN_WHITELIST problem

2007-01-23 Thread Will Nordmeyer
René Berber wrote: > Sherman Lilly wrote: [snip] > > I get why they are getting through. They are spoofing the Return-Path. > > Is there any way to remedy this problem? > > Depends on your server. For sendmail there is: > > http://ultra.ap.krakow.pl/~raj/sendmail/english.html > > the FE

Re: USER_IN_WHITELIST problem

2007-01-22 Thread René Berber
Sherman Lilly wrote: [snip] > I was looking on the net and I came across a plugin on spamassassin I don't > think i have loaded. Will the SPF plugin help with this problem? No, I think the default score is 0.0, and it's only for positive id (thus I add points, not subtract). Botnet plugin probab

Re: USER_IN_WHITELIST problem

2007-01-22 Thread Sherman Lilly
On Monday 22 January 2007 12:51, Jonas Eckerman wrote: > > that is getting through. It should have failed. > > Why should it have failed? > > > WHITELIST_FROM [EMAIL PROTECTED] > > [...] > > > Return-Path: <[EMAIL PROTECTED]> > > * You have whitelisted all mail from "[EMAIL PROTECTED]". > * The mai

Re: USER_IN_WHITELIST problem

2007-01-22 Thread Jonas Eckerman
> that is getting through. It should have failed. Why should it have failed? > WHITELIST_FROM [EMAIL PROTECTED] [...] > Return-Path: <[EMAIL PROTECTED]> * You have whitelisted all mail from "[EMAIL PROTECTED]". * The mail is from "[EMAIL PROTECTED]" according to the SMTP envelope. = You have whi

Re: USER_IN_WHITELIST problem

2007-01-22 Thread Daryl C. W. O'Shea
Drew Burchett wrote: Do you have some example headers? This is a legitimate email, but it got flagged as USER_IN_WHITELIST while CNN is not listed in my whitelist: You didn't include the envelope from address in any of your examples. Daryl

RE: USER_IN_WHITELIST problem

2007-01-22 Thread Drew Burchett
>Do you have some example headers? This is a legitimate email, but it got flagged as USER_IN_WHITELIST while CNN is not listed in my whitelist: Received: from cnnimail33.turner.com (cnnimail33.turner.com [64.236.25.90]) by spamfilter.onlineky.net (Postfix) with ESMTP id 2FB331757E

Re: USER_IN_WHITELIST problem

2007-01-22 Thread Sherman Lilly
On Monday 22 January 2007 11:39, you wrote: > Sherman Lilly wrote: > > I have spam getting through that would get filtered if they were not > > getting -100 because of the USER_IN_WHITELIST rule. I do have a whitelist > > but no of these spam email have anything close to my whitelist. > > Yes they

Re: USER_IN_WHITELIST problem

2007-01-22 Thread Jim Maul
o: Sherman Lilly Cc: users@spamassassin.apache.org Subject: Re: USER_IN_WHITELIST problem Sherman Lilly wrote: I have spam getting through that would get filtered if they were not getting -100 because of the USER_IN_WHITELIST rule. I do have a whitelist but no of these spam email have a

RE: USER_IN_WHITELIST problem

2007-01-22 Thread Drew Burchett
(270)527-3132 -Original Message- From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] Sent: Monday, January 22, 2007 10:40 AM To: Sherman Lilly Cc: users@spamassassin.apache.org Subject: Re: USER_IN_WHITELIST problem Sherman Lilly wrote: > I have spam getting through that would get fil

Re: USER_IN_WHITELIST problem

2007-01-22 Thread Daryl C. W. O'Shea
Sherman Lilly wrote: I have spam getting through that would get filtered if they were not getting -100 because of the USER_IN_WHITELIST rule. I do have a whitelist but no of these spam email have anything close to my whitelist. Yes they do, otherwise you wouldn't see USER_IN_WHITELIST hitting.

Re: USER_IN_WHITELIST problem

2007-01-22 Thread JamesDR
Sherman Lilly wrote: I have spam getting through that would get filtered if they were not getting -100 because of the USER_IN_WHITELIST rule. I do have a whitelist but no of these spam email have anything close to my whitelist. I am using the latest version of spamassassin and update my rules

Re: USER_IN_WHITELIST problem

2006-08-23 Thread Nick Rout
On Wed, 23 Aug 2006 14:49:19 -0700 Kelson wrote: > Nick Rout wrote: > > So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where > > Return-Path is being set? Is it likely to be set by the spammer? Or is > > my system adding it in somewhere (probably in error). > > Return-Path is u

Re: USER_IN_WHITELIST problem

2006-08-23 Thread Kelson
Nick Rout wrote: So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where Return-Path is being set? Is it likely to be set by the spammer? Or is my system adding it in somewhere (probably in error). Return-Path is usually added by the receiving system, and contains the envelope s

Re: USER_IN_WHITELIST problem

2006-08-22 Thread jdow
From: "Nick Rout" <[EMAIL PROTECTED]> On Tue, 22 Aug 2006 19:58:59 -0400 Rick Macdougall wrote: > > > Return-Path: <[EMAIL PROTECTED]> > X-Spam-Checker-Version: SpamAssassin 3.1.3-gr0 (2006-06-01) on www.rout.co.nz > X-Spam-Level: > X-Spam-Status: No, score=-88.6 required=5.5 tests=AWL,BAYES_

Re: USER_IN_WHITELIST problem

2006-08-22 Thread Rick Macdougall
Nick Rout wrote: On Tue, 22 Aug 2006 19:58:59 -0400 Thanks, quick reply! (Thanks too Daryl, also quick) So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where Return-Path is being set? Is it likely to be set by the spammer? Or is my system adding it in somewhere (probably in err

Re: USER_IN_WHITELIST problem

2006-08-22 Thread Nick Rout
On Tue, 22 Aug 2006 19:58:59 -0400 Rick Macdougall wrote: > > > > > > Return-Path: <[EMAIL PROTECTED]> > > X-Spam-Checker-Version: SpamAssassin 3.1.3-gr0 (2006-06-01) on > > www.rout.co.nz > > X-Spam-Level: > > X-Spam-Status: No, score=-88.6 required=5.5 tests=AWL,BAYES_99, > > HTML_IMAGE_O

Re: USER_IN_WHITELIST problem

2006-08-22 Thread Daryl C. W. O'Shea
Nick Rout wrote: Hi, I am new to this list and certainly not a SA expert, however I have moderate experience in general linux issues and mailer issues. I am getting a series of messages allowed through on the basis of USER_IN_WHITELIST. I have searched the mailing list archive and pored over my

Re: USER_IN_WHITELIST problem

2006-08-22 Thread Rick Macdougall
Nick Rout wrote: Hi, I am new to this list and certainly not a SA expert, however I have moderate experience in general linux issues and mailer issues. I am getting a series of messages allowed through on the basis of USER_IN_WHITELIST. I have searched the mailing list archive and pored over my