MX Scan white list problem

Jamesa
Posts: 12
Joined: Mon Jan 19, 2009 11:47 am

MX Scan white list problem

Postby Jamesa » Mon Oct 26, 2009 10:57 am

Im trying to whitelist items that are sent to me via a mail list. I have added the domain of the list to both the sender and recipient whitelists but everything is still being flagged as possible spam. The only thing i can think is that the list sends mail 'on behalf of' so could this be the problem? If so, how can i get round it? Is there a way to whilelist messages with specific words in the subject for example?

Here is a header from a filtered message:

Code: Select all

Microsoft Mail Internet Headers Version 2.0
Received: from mail.veanet.co.uk ([217.10.121.231]) by aubrey.co.uk with Microsoft SMTPSVC(6.0.3790.3959);
    Mon, 26 Oct 2009 04:57:15 +0000
Received: from ([127.0.0.1]) with MailEnable ESMTP; Mon, 26 Oct 2009 04:57:00 +0000
Received: from mail.sagedata.net (localhost [127.0.0.1])
   by mail.sagedata.net (8.14.3/8.14.3) with ESMTP id n9Q4sOVD036451;
   Sun, 25 Oct 2009 23:56:41 -0500 (CDT)
   (envelope-from antenna-discussion-bounces@antennex.com)
X-Envelope-Sender: steinerviolinist@gmail.com
Received: from mail-vw0-f176.google.com (mail-vw0-f176.google.com
   [209.85.212.176])
   by mail.sagedata.net (8.14.3/8.14.3) with ESMTP id n9Q4sH36036443
   for <antenna-discussion@antennex.com>;
   Sun, 25 Oct 2009 23:54:17 -0500 (CDT)
   (envelope-from steinerviolinist@gmail.com)
Received: by vws6 with SMTP id 6so1022391vws.12
   for <antenna-discussion@antennex.com>;
   Sun, 25 Oct 2009 21:54:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
   h=domainkey-signature:mime-version:received:in-reply-to:references
   :date:message-id:subject:from:to:content-type;
   bh=9TaFMOa9qZ3U3vb3zW0l0SRcJRyjNyo6bq6ys0+fQ4E=;
   b=CE9oIaorB6QI6QC+xGkNk9Prh/b+DoIEffV4S8MvbkewNKMdsASvD6WnzK1SVNGQbE
   RwLqUXnajGp7ccDE0/kvlNoztvC8mhbEmFqYvKjmQBJT8TQ0KcMcSIlbukFn6QAFnaL2
   hiy0SwnBLunlnpHDGyoBMNBDpxwz35DMlKySA=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
   h=mime-version:in-reply-to:references:date:message-id:subject:from:to
   :content-type;
   b=BreI+Br1fAaxDstZXbNKm2NfU8MDS6ncbQ4QRtyyhztbxlP0RGoZtDBOb9S2yl5yuM
   1g9tB2fCXF9hyu+qJfCB8YWWeXUpu7MKK97lxmT0etp+/4zCrlAgxdvFTqxtAixGvwpM
   Oz9JuBOUzazf8K5t9Of/wu4MxVBoVAgj889OQ=
MIME-Version: 1.0
Received: by 10.220.122.96 with SMTP id k32mr8625022vcr.36.1256532856565; Sun,
   25 Oct 2009 21:54:16 -0700 (PDT)
In-Reply-To: <D79F917474EE45EC8AF7F37A99C6595C@FredPC>
References: <mailman.1015.1256166318.871.antenna-discussion@antennex.com>
   <2593F59B4AA64B8BB5DADB4C8E9C2229@HomePC>
   <1257AE7584774B48B3AC2059A7982AE5@louscomputer>
   <F961A356B7634B99B0B1E9AF053B8E49@FredPC>
   <81e0ccd20910251549r70f92fafy60f5d2d7de44ca76@mail.gmail.com>
   <D79F917474EE45EC8AF7F37A99C6595C@FredPC>
Date: Mon, 26 Oct 2009 00:54:16 -0400
Message-ID: <72967ab00910252154t6536c8a2n2f8a1a47741822bf@mail.gmail.com>
From: Oliver Steiner <steinerviolinist@gmail.com>
To: Discussions of Antennas and Related Topics
   <antenna-discussion@antennex.com>
X-Scanned-By: milter-sender/1.16.915  (localhost [0.0.0.0]); Sun, 25 Oct 2009 23:56:43 -0500
X-Scanned-By: milter-spamc/1.15.388 (mail.sagedata.net [38.106.15.121]);
   Sun, 25 Oct 2009 23:54:23 -0500
X-Spam-Status: NO, hits=-21.60 required=4.50
X-Spam-Report: Content analysis details:   (-21.6 points, 4.5 required) |
   |  pts rule name              description
   | ---- ----------------------
   --------------------------------------------------
   |  -10 JLS_ATX_2              BODY: JLS_ATX_2
   | -10 JLS_SUBJ_ANT_DISCUSS Subject contains phrase 'Antenna-discussion'
   | 0.3 DK_POLICY_SIGNSOME Domain Keys: policy says domain signs some
   mails
   | -6.0 USER_IN_WHITELIST_TO   User is listed in 'whitelist_to'
   | 1.5 BOTNET_SERVERWORDS Hostname contains server-like substrings
   |           [botnet_serverwords, ip=209.85.212.176,
   rdns=mail-vw0-f176.google.com]
   |  0.0 DK_SIGNED              Domain Keys: message has a signature
   | -0.0 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
   |                             verification
   | 0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
   | 0.1 BAYES_00 BODY: Bayesian spam probability is 0 to 1p
   |                             [score: 0.0000]
   | 2.5 AWL AWL: From: address is in the auto white-list |
Subject: * POSSIBLE SPAM * Re: [Antenna-discussion] Doublet help please
X-BeenThere: antenna-discussion@antennex.com
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Discussions of Antennas and Related Topics
   <antenna-discussion@antennex.com>
List-Id: Discussions of Antennas and Related Topics
   <antenna-discussion.antennex.com>
List-Unsubscribe: <http://lists.antennex.com/mailman/options/antenna-discussion>,
   <mailto:antenna-discussion-request@antennex.com?subject=unsubscribe>
List-Archive: <http://lists.antennex.com/mailman/private/antenna-discussion>
List-Post: <mailto:antenna-discussion@antennex.com>
List-Help: <mailto:antenna-discussion-request@antennex.com?subject=help>
List-Subscribe: <http://lists.antennex.com/mailman/listinfo/antenna-discussion>,
   <mailto:antenna-discussion-request@antennex.com?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: antenna-discussion-bounces@antennex.com
Errors-To: antenna-discussion-bounces@antennex.com
X-MXScan-Scan: Scanned by MxScan 1.8.600.0 for VERSANET
X-MXScan-Msgid: 68402765A32746B1BAB4DACA0E77AD7B_
X-MXScan-Country-Sequence: Localhost->Destination
X-MXScan-AntiVirus: ClamAV 0.95.2/9934/Sat Oct 24 08:43:19 2009 [Clean]
X-MXScan-AntiSpam: CLAM_SANE [Pass], KEYWORD [Pass], RDNSBL [Pass], URLBL [Pass], SPAMASSASSIN [0.0], DCC_CHECK [Body=many Fuz1=many Fuz2=many (6)], SENDERBASE [NA]
X-MXScan-SpamScore: 6
X-MXScan-ProcessingTime: 2.234 sec(s)
Return-Path: antenna-discussion-bounces@antennex.com
X-OriginalArrivalTime: 26 Oct 2009 04:57:15.0526 (UTC) FILETIME=[C98E0A60:01CA55F8]


Thanks,
James

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

...

Postby polarisie » Tue Oct 27, 2009 6:22 pm

Based on the previous message, you will need to whitelist the SENDER address "steinerviolinist@gmail.com". Howver, i suspect that this is a mailing list and the FROM addresses are the individual sender address which would be something else everything a message is sent

The recommended way here would be to WHITELIST the IP address of the Mailist list address server.

Cheers
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

Jamesa
Posts: 12
Joined: Mon Jan 19, 2009 11:47 am

Postby Jamesa » Wed Oct 28, 2009 10:40 am

Thanks for the reply. Yes its a mailing list and it shows the from address as "antenna-discussion-bounces@antennex.com; on behalf of; Tim Reed [timm@gmail.com]" for example. I will try whitelisting the IP address! Thanks for your help.

Who is online

Users browsing this forum: No registered users and 2 guests