whitelist_from not working, sometimes

[Michael Weber <mw...@alliednational.com>]

Greetings!

I have a file, local-names.cf, in the /etc/mail/spamassassin directory
which is a list of addresses I need to whitelist.  It seems to work,
except for one sender.  Here is the line from the .cf file:

whitelist_from           LABONE.com

This never triggers when I receive mail with a header that looks like
the one below.  I have seen emails with all caps like the line above, I
have also seen emails with LabOne.com or labone.com in the header.  I
have tried all of these variations and it really looks like my
local-names.cf file is being ignored.  Except that other emails from
other domains have spam headers that say the whitelist rule triggered
just like it should.  Any ideas on where to look?

Return-path: <su...@labone.com>
Received: from web-2.alliednational.com [172.16.30.32]
	by mail.alliednational.com; Tue, 09 Nov 2004 16:51:07 -0600
Received: (from filter@localhost)
	by web-2.alliednational.com (8.11.6/8.11.6) id iA9Mp7h13278
	for ithelp@alliednational.com; Tue, 9 Nov 2004 16:51:07 -0600
X-Authentication-Warning: web-2.alliednational.com: filter set sender
to support@labone.com using -f
Received: from hades.labone.com (unknown [198.70.194.2])
	by web-2.alliednational.com (Postfix) with ESMTP id C8E6CBBF7
	for <it...@alliednational.com>; Tue,  9 Nov 2004 16:51:03 -0600
(CST)
Received: from smsrv.1.24.172.in-addr.arpa by hades.labone.com
          via smtpd (for h-66-166-36-212.chcgilgm.covad.net
[66.166.36.212]) with ESMTP; Tue, 9 Nov 2004 16:51:03 -0600
From: "Support LabOne" <su...@labone.com>
Reply-To: "LabOne Transmission System" <su...@labone.com>
To: ithelp@alliednational.com 
Subject: %%SPAM%% (5.3) HIPAA
Date: Tue Nov  9 16:50:53 2004
Message-Id: <20...@web-2.alliednational.com>
X-Spam-Prev-Subject: HIPAA
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	web-2.alliednational.com
X-Spam-Report: 
	*  1.0 _YM_HS_BAGLE_A _YM_HS_BAGLE_A
	*  0.6 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before
Received: date
	*  1.8 MSGID_FROM_MTA_ID Message-Id for external message added
locally
	*  0.5 MY_UHVRCV BODY: Your have received this spam....
	*  1.6 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
	*      [score: 0.5187]
	* -0.0 AWL AWL: From: address is in the auto white-list
X-Spam-Status: Yes, score=5.3 required=5.0 tests=AWL,BAYES_50,
	DATE_IN_PAST_12_24,MSGID_FROM_MTA_ID,MY_UHVRCV,_YM_HS_BAGLE_A 
	autolearn=no version=3.0.1
X-Spam-Level: *****

What gives?

TIA!

-Michael




CONFIDENTIALITY NOTICE:  This communication and any 
attached or enclosed files may contain information 
that is privileged, confidential, proprietary and/or 
otherwise protected from disclosure under applicable 
law ("Confidential Information").  Any review, 
retransmission, publication, dissemination, 
distribution, forwarding, printing, copying, storing, saving 
or other use or disclosure of this communication and/or the 
Confidential Information, or taking any action in reliance 
thereon, by an individual or entity other than the intended 
recipient(s) is strictly prohibited.  

This communication and the Confidential Information are 
intended solely for the use of the individual(s) and/or 
entity(ies) to which this communication is addressed. 
If you are not the intended recipient(s) (or responsible 
for delivery to said recipient(s)), please be advised 
that you have received this communication in error and 
have an obligation to promptly inform the sender by reply 
e-mail or facsimile and to permanently delete, shred or 
otherwise destroy, in its entirety, this original communication 
and all copies thereof, whether in electronic or hard copy format. 

Re: whitelist_from not working, sometimes

[hi...@free.fr]

I use :

whitelist_from *@domain-name


and it works good.
/Hitete

Re: whitelist_from not working, sometimes

[Matt Kettler <mk...@evi-inc.com>]

At 10:53 AM 11/10/2004, Michael Weber wrote:
>I have a file, local-names.cf, in the /etc/mail/spamassassin directory
>which is a list of addresses I need to whitelist.  It seems to work,
>except for one sender.  Here is the line from the .cf file:
>
>whitelist_from           LABONE.com
>
>This never triggers when I receive mail with a header that looks like
>the one below.  I have seen emails with all caps like the line above, I
>have also seen emails with LabOne.com or labone.com in the header.  I
>have tried all of these variations and it really looks like my
>local-names.cf file is being ignored.  Except that other emails from
>other domains have spam headers that say the whitelist rule triggered
>just like it should.  Any ideas on where to look?

I'd suggest looking at man Mail::SpamAssassin::Conf, section on whitelist_from


If you want to match *@LABONE.com you need to put that in your 
whitelist_from. Otherwise, it should only match mail that is literally 
"From: labone.com"

There's no implicit sub-string matching in whitelist_from that I'm aware 
of. You need to insert file-glob style wildcards where you need them.