You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by LuKreme <kr...@kreme.com> on 2004/08/16 03:48:46 UTC

Whitelist_from_Rcvd (again)

in user_prefs:

whitelist_from_rcvd root@*.covisp.net covisp.net

headers:
Return-Path: <ro...@mail.covisp.net>
X-Original-To: kremels@kreme.com
Delivered-To: kremels@covisp.net
Received: by mail.covisp.net (Postfix, from userid 0)
	id 2861E118B482; Sun, 15 Aug 2004 00:05:10 -0600 (MDT)
To: kremels@kreme.com
Subject: Blocked mail for Yesterday
Message-Id: <20...@mail.covisp.net>
Date: Sun, 15 Aug 2004 00:05:10 -0600 (MDT)
From: root@mail.covisp.net (Charlie Root)
X-Spam-Checker-Version: SpamAssassin 3.0.0-pre4 (2004-08-04) on
	akane.covisp.net
X-Spam-Level: ***
X-Spam-Status: No, hits=3.9 required=5.0 
tests=ALL_TRUSTED=-0.842,AWL=-1.653,
	BAYES_00=-2.599,URIBL_AB_SURBL=5,URIBL_OB_SURBL=4 bayes=0.0000
	autolearn=no version=3.0.0-pre4

no sign of the whitelist taking affect.

I've tried a variety of setting, but nothing seems to have an effect.

-- 
Like the moment when the brakes lock/And you slide towards the big 
truck/You stretch the frozen moments with your fear

Re: Whitelist_from_Rcvd (again)

Posted by LuKreme <kr...@kreme.com>.
On 16 Aug 2004, at 13:11, Matt Kettler wrote:
> header MY_LOCAL_RCVD    Received =~ / Received\: by mail\.covisp\.net 
> \(Postfix\, from userid \d{1,3})/
> score MY_LOCAL_RCVD     -10.0

Looking at that spamassassin --lint says it's invalid

header MY_LOCAL_RCVD    Received =~ /^by mail\.covisp\.net \(Postfix, 
from userid \d{,4}/

seems to work (well, it passes --lint at least, dunno if it WORKS yet)

-- 
There is a tragic flaw in our precious Constitution, and I don’t know 
what can be done to fix it. This is it: Only nut cases want to be 
president.



Re: Whitelist_from_Rcvd (again)

Posted by Matt Kettler <mk...@evi-inc.com>.
At 03:07 PM 8/16/2004, LuKreme wrote:
>So how do I whitelist this (and similar) emails?

Custom rule looks to be the only way. SA explicitly ignores local received: 
headers when it's working out the Received path/whitelists.

This might be a good starting point.

header MY_LOCAL_RCVD    Received =~ / Received\: by mail\.covisp\.net 
\(Postfix\, from userid \d{1,3})/
score MY_LOCAL_RCVD     -10.0




Re: Whitelist_from_Rcvd (again)

Posted by LuKreme <kr...@kreme.com>.
On 16 Aug 2004, at 09:48, Matt Kettler wrote:
> At 09:48 PM 8/15/2004, LuKreme wrote:
>> whitelist_from_rcvd root@*.covisp.net covisp.net
>>
>> headers:
>> Return-Path: <ro...@mail.covisp.net>
>> X-Original-To: kremels@kreme.com
>> Delivered-To: kremels@covisp.net
>> Received: by mail.covisp.net (Postfix, from userid 0)
>>         id 2861E118B482; Sun, 15 Aug 2004 00:05:10 -0600 (MDT)
>> To: kremels@kreme.com
>> Subject: Blocked mail for Yesterday
>> Message-Id: <20...@mail.covisp.net>
>> Date: Sun, 15 Aug 2004 00:05:10 -0600 (MDT)
>> From: root@mail.covisp.net (Charlie Root)
>> X-Spam-Checker-Version: SpamAssassin 3.0.0-pre4 (2004-08-04) on
>>         akane.covisp.net
>> X-Spam-Level: ***
>> X-Spam-Status: No, hits=3.9 required=5.0 
>> tests=ALL_TRUSTED=-0.842,AWL=-1.653,
>>         BAYES_00=-2.599,URIBL_AB_SURBL=5,URIBL_OB_SURBL=4 bayes=0.0000
>>         autolearn=no version=3.0.0-pre4
>>
>> no sign of the whitelist taking affect.
>
> No sign of it ever coming from covisp.net either. No reason to 
> whitelist.

So how do I whitelist this (and similar) emails?

-- 
I know that you believe you understand what you think I said but I am 
not sure you realize that what you heard is not what I meant.


Rejection Problem

Posted by Nick Oliver <nw...@internetsecurityguru.com>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am using Postfix as a relay to my Novell Groupwise e-mail server
and it is doing quite well, however, I am running into some false
positive problems that seem to come from header rejections.  I have
NO idea how to diagnose this type of problem.  Would one of you more
learned folks out there give me a hand please?

This is the listing as it is shown in the /var/log/maillog file.  I
have whitelisted the sender, using the smtpd_sender_restrictions
variable, but it is still being rejected.

Aug 16 10:55:32 mail postfix/cleanup[25789]: 5AD22274E9: reject:
header Received: from iesexbe1.ioffice.ies-co.net ([10.0.0.18]) by
owa.ies-co.net with Microsoft SMTPSVC(6.0.3790.0);?? Mon, 16 Aug 2004
10:55:31 -0500 from owa.ies-co.net[63.89.0.12];
from=<Ro...@millselectrical.com> to=<gd...@aguirre.com>
proto=ESMTP helo=<owa.ies-co.net>: Message content rejected

Is there something in this log that tells me what the problem is and
whether it is on my side or the sender side?

Nick Oliver

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQA/AwUBQSDcDIHa2qg1FTg0EQJGLgCg6ToJye9VXdbl7qOrXnkUwgGp/V8Ani4a
E4/1yQz8IB1Bb9mMBsGHjHRM
=URXZ
-----END PGP SIGNATURE-----


Re: Whitelist_from_Rcvd (again)

Posted by Matt Kettler <mk...@evi-inc.com>.
At 09:48 PM 8/15/2004, LuKreme wrote:
>whitelist_from_rcvd root@*.covisp.net covisp.net
>
>headers:
>Return-Path: <ro...@mail.covisp.net>
>X-Original-To: kremels@kreme.com
>Delivered-To: kremels@covisp.net
>Received: by mail.covisp.net (Postfix, from userid 0)
>         id 2861E118B482; Sun, 15 Aug 2004 00:05:10 -0600 (MDT)
>To: kremels@kreme.com
>Subject: Blocked mail for Yesterday
>Message-Id: <20...@mail.covisp.net>
>Date: Sun, 15 Aug 2004 00:05:10 -0600 (MDT)
>From: root@mail.covisp.net (Charlie Root)
>X-Spam-Checker-Version: SpamAssassin 3.0.0-pre4 (2004-08-04) on
>         akane.covisp.net
>X-Spam-Level: ***
>X-Spam-Status: No, hits=3.9 required=5.0 tests=ALL_TRUSTED=-0.842,AWL=-1.653,
>         BAYES_00=-2.599,URIBL_AB_SURBL=5,URIBL_OB_SURBL=4 bayes=0.0000
>         autolearn=no version=3.0.0-pre4
>
>no sign of the whitelist taking affect.

No sign of it ever coming from covisp.net either. No reason to whitelist.