spamassassin-users July 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: Trouble whitelisting domain users with w

Re: Trouble whitelisting domain users with whitelist_from_rcvd

From: Matus UHLAR - fantomas <uhlar_at_nospam>
Date: Wed Jul 28 2010 - 15:10:15 GMT
To: users@spamassassin.apache.org

On 28.07.10 07:57, keithcommins wrote:
> Having some trouble getting this to work correctly , it would seem..
>
> Firstly, here is my whitelist_from rcvd config from my local.cf file.
>
> whitelist_from_rcvd *@mydomain.com mydomain.local
> trusted_networks 172.16.1/24 172.16.2/24 172.16.3/24 172.16.5/24 xx.xx.xx.xx
> internal_networks 172.16.1/24 172.16.2/24 172.16.3/24 172.16.5/24
> xx.xx.xx.xx
>
> ( xx.xx.xx.xx represents the outward facing IP of my mail server )
>
> Secondly, below is a header from a test email I sent to myself..

> Received: by mydomain.com (CommuniGate Pro PIPE 5.2.12)
> with PIPE id 18275900; Wed, 28 Jul 2010 11:31:13 +0100
> X-Spam-Status: No, score=3.8 required=8.0
> tests=ALL_TRUSTED,FH_DATE_PAST_20XX,
> HTML_IMAGE_ONLY_20,HTML_MESSAGE autolearn=no version=3.2.5
> Received: from [172.16.3.150] (account some.user [172.16.3.150] verified)
> by mydomain.com (CommuniGate Pro SMTP 5.2.12)
> with ESMTPA id 18275888 for some.user@mydomain.com; Wed, 28 Jul 2010
> 11:31:04 +0100

afaik whitelist_* is applied on mail sent from remote hosts. I am not sure
if it hits on internal_netowrks or trusted_networks boundary (i guess it's
the former) but this mail never crossed the internal network boundary, do
any blacklist or whitelist rule can't hit here.

> Couple of things to note , we use Active Directory which means the FQDN name
> of all our machines end in *.local rather than *.com. Should the
> whitelist_rcvd reflect this in any way??

I don't see any .local in this mail, show us Received: lines with .local
hostnames.

-- Matus UHLAR - fantomas, uhlar_at_fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "The box said 'Requires Windows 95 or better', so I bought a Macintosh".