White list issue

[Chris Barber]

Hi All,

We have the latest MailScanner and Mailwatch combo running on CentOS. Has been working fine for a long time. We have a couple of users who are receiving spam and it shows as white listed in the Mailwatch interface. However, the email address nor the domain are on the white list at all.

Has anyone seen this behavior? I am at a loss.

Thanks!
Chris

[Antony Stone]

Post by Chris Barber
Hi All,
We have the latest MailScanner and Mailwatch combo running on CentOS. Has
been working fine for a long time. We have a couple of users who are
receiving spam and it shows as white listed in the Mailwatch interface.
However, the email address nor the domain are on the white list at all.
Has anyone seen this behavior? I am at a loss.

Is the sending server whitelisted (ie: the next-hop machine which is directly
communicating with yours)?


Antony.

[Chris Barber]

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Wednesday, July 9, 2014 11:06 AM
To: MailScanner discussion
Subject: Re: White list issue

Post by Chris Barber
Hi All,
We have the latest MailScanner and Mailwatch combo running on CentOS.
Has been working fine for a long time. We have a couple of users who
are receiving spam and it shows as white listed in the Mailwatch interface.
However, the email address nor the domain are on the white list at all.
Has anyone seen this behavior? I am at a loss.

Is the sending server whitelisted (ie: the next-hop machine which is directly communicating with yours)?


Antony.
--
"Black holes are where God divided by zero."

- Steven Wright

Please reply to the list;
please *don't* CC me.

Thanks, that was it. Found the secondary MX IP on the whitelist for the users domain.

Thanks agian

[Alex Neuman]

I've only seen this behavior when the whitelisting "hits" a rule that
you're not seeing, even though it's there - such as IP address, for example.

Also, when a message is sent TO: a whitelisted user, everybody else in the
message gets it.

Example:

From: spammer at douchebag.com
To: johndoe at victim.com (whitelisted)
CC: Spamhater at victim.com (not whitelisted)

Unless you "split messages per recipient" (something that depends on your
MTA), since To: johndoe at victim.com is whitelisted or since
From:spammer at douchebag.com and To:johndoe at victim.com is whitelisted or
From: douchebag.com and To: (you get the picture) spamhater@ gets a copy.



*Alex Neuman van der Hans*Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

Mobile: [phone]
Work: [phone]
Work (USA): [phone]
Skype: AlexNeuman

Don't miss Vida Digital on LiveStream
<http://new.livestream.com/accounts/5061819>!
Saturdays 8am-10am on 104.3FM Panama

Follow *@AlexNeuman <https://twitter.com/alexneuman>* on Twitter
Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube

Post by Chris Barber
Hi All,
We have the latest MailScanner and Mailwatch combo running on CentOS. Has
been working fine for a long time. We have a couple of users who are
receiving spam and it shows as white listed in the Mailwatch interface.
However, the email address nor the domain are on the white list at all.
Has anyone seen this behavior? I am at a loss.
Thanks!
Chris
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140709/c6ca7673/attachment.html