You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by mathiasadsl <ma...@hotmail.com> on 2008/10/23 19:27:25 UTC

Whitelist_from dont work at all

Hi,

I'm trying hard to make my whitelist_from work.
I want to whitelist my own domain (i know... it can be dangerous but it's
for testing purpose).

This is my local.cf :
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.

required_hits 5
report_safe 0
rewrite_header subject [SPAM]

report_safe 0
header DAEMON Subject =~ /DAEMON/
score DAEMON 5
whitelist_from *@group-riget.com
whitelist_from *@lnxgw.group-riget.com
whitelist_from *.lnxgw.group-riget.com





I forward (througt postfix, every "SPAM" tagged email in a specific mailbox
"spambox", it's working perfecly). 

But i dont know why a few one of my users are tagged, even though if
"white_list" from allow my own domain.

Whitelist dont work at all!!


This is an example of unormaly tagged email:


Return-Path: <sl...@group-riget.com>
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
     lnxgw.group-riget.com
X-Spam-Level:
X-Spam-Status: No, score=-96.7 required=5.0 tests=AWL,DNS_FROM_SECURITYSAGE,
     DRUGS_STOCK_MIMEOLE,HTML_MESSAGE,RDNS_NONE,USER_IN_WHITELIST
autolearn=no
     version=3.2.3
X-Original-To: jerome.claveyrolas@group-riget.com
Delivered-To: spambox@lnxgw.group-riget.com
Received: from pc1469 (unknown [192.9.203.23])
     by lnxgw.group-riget.com (Postfix) with ESMTP id 8F835DA4997
     for <je...@group-riget.com>; Thu, 23 Oct 2008 10:49:16
+0200 (CEST)
From: "Slicra" <sl...@group-riget.com>
To: "'Jerome claveyrolas'" <je...@group-riget.com>
Subject: TR: [SPAM] Devis
Date: Thu, 23 Oct 2008 11:33:53 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
     boundary="----=_NextPart_000_0134_01C93503.3A3EFBB0"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: Ack07BQLF+19LCdORF2T5OIgqKziJQABl67w
Message-Id: <20...@lnxgw.group-riget.com>


*****************

What's wrong with my whitelist????
Even if i add only one address (user@domain.com), spamassassin tag it!


Thank you
Mathias

-- 
View this message in context: http://www.nabble.com/Whitelist_from-dont-work-at-all-tp20135799p20135799.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.


Re: Whitelist_from dont work at all

Posted by Evan Platt <ev...@espphotography.com>.
mathiasadsl wrote:
> Hi,
>
> I'm trying hard to make my whitelist_from work.
> I want to whitelist my own domain (i know... it can be dangerous but it's
> for testing purpose).
>
> This is an example of unormaly tagged email:
>   
unormaly ?

If you're trying to say your example isn't being whitelisted... It is.

"X-Spam-Status: No, score=-96.7 required=5.0 
tests=AWL,DNS_FROM_SECURITYSAGE,  
DRUGS_STOCK_MIMEOLE,HTML_MESSAGE,RDNS_NONE,
 >>>>USER_IN_WHITELIST"

It scored -96.7.

Where's the problem?

Re: Whitelist_from dont work at all

Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Thu, 2008-10-23 at 10:27 -0700, mathiasadsl wrote:
> I'm trying hard to make my whitelist_from work.
> I want to whitelist my own domain (i know... it can be dangerous but it's
> for testing purpose).

Yes, for production you should use whitelist_from_rcvd instead, if there
is a need for white-listing at all. Spammers like to pretend they are
you.
  http://wiki.apache.org/spamassassin/WhitelistingEverybody

Also have a look here:
  http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html#whitelist_and_blacklist_options


> This is my local.cf :
> # These values can be overridden by editing ~/.spamassassin/user_prefs.cf
                                                              ^^^^^^^^^^^^^
It's user_prefs actually.

> # (see spamassassin(1) for details)
> # These should be safe assumptions and allow for simple visual sifting
> # without risking lost emails.
> 
> required_hits 5
> report_safe 0
> rewrite_header subject [SPAM]
> 
> report_safe 0
> header DAEMON Subject =~ /DAEMON/
> score DAEMON 5
> whitelist_from *@group-riget.com
> whitelist_from *@lnxgw.group-riget.com
> whitelist_from *.lnxgw.group-riget.com


> I forward (througt postfix, every "SPAM" tagged email in a specific mailbox
> "spambox", it's working perfecly). 

Looks like it doesn't. :)  Rather than filtering based on the Subject,
I'd use a more reliable header added by SpamAssassin.


> This is an example of unormaly tagged email:
> 
> Return-Path: <sl...@group-riget.com>
> X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
>      lnxgw.group-riget.com
> X-Spam-Level:
> X-Spam-Status: No, score=-96.7 required=5.0 tests=AWL,DNS_FROM_SECURITYSAGE,
                                                        ^^^^^^^^^^^^^^^^^^^^^
That RBL is in-operational for a while. They list the universe so that
people stop querying their zones. You'll get that hit for each and every
message.

Since you're using 3.2.3, this tells me you are not using sa-update.
This rule has been removed. I strongly suggest you update your rules.
  http://wiki.apache.org/spamassassin/RuleUpdates

>      DRUGS_STOCK_MIMEOLE,HTML_MESSAGE,RDNS_NONE,USER_IN_WHITELIST autolearn=no
                                                  ^^^^^^^^^^^^^^^^^
Obviously, your whitelist_from setting DOES work.

>      version=3.2.3
> X-Original-To: jerome.claveyrolas@group-riget.com
> Delivered-To: spambox@lnxgw.group-riget.com
> Received: from pc1469 (unknown [192.9.203.23])
>      by lnxgw.group-riget.com (Postfix) with ESMTP id 8F835DA4997
>      for <je...@group-riget.com>; Thu, 23 Oct 2008 10:49:16
> +0200 (CEST)
> From: "Slicra" <sl...@group-riget.com>
> To: "'Jerome claveyrolas'" <je...@group-riget.com>
> Subject: TR: [SPAM] Devis

> What's wrong with my whitelist????
> Even if i add only one address (user@domain.com), spamassassin tag it!

Hmm, no -- I don't use that ghastly Subject munging, but I am rather
positive that the above is NOT done by YOUR SpamAssassin. Have a look at
the Subject header. The "tag" is pre-pended by some strange "TR:". This
has not been added by your SpamAssassin.

  guenther


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}