Print Page | Close Window

Whitelisted domains still get tagged

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6349
Printed Date: 15 December 2017 at 9:09am


Topic: Whitelisted domains still get tagged
Posted By: Guests
Subject: Whitelisted domains still get tagged
Date Posted: 14 January 2008 at 5:44am

I'm using the latest beta version and when I have SPAM tagging en forwarding enabled there are mails from whitelisted domains that still get SPAM-tagged.

01-11-08 14:54:17:526 -- (2596) Connection from: 217.77.137.86  -  Originating country : Netherlands
01-11-08 14:54:17:651 -- (2596) Received MAIL FROM: < mailto:bart@djfklasdk.com - bart@djfklasdk.com >
01-11-08 14:54:17:666 -- (2596) Received RCPT TO: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl
01-11-08 14:54:17:682 -- (2596) Resolving 217.77.137.86 - smtp1.email.luna.net
01-11-08 14:54:17:947 -- (2596) - Invalid MX record -
01-11-08 14:54:17:947 -- (2596) 217.77.137.86 - Mail from: mailto:bart@djfklasdk.com - bart@djfklasdk.com To: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl will be rejected
01-11-08 14:54:17:947 -- (2596) Bypassed all rules for: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl from mailto:bart@djfklasdk.com - bart@djfklasdk.com ( AutoWhiteList Force Delivery)
01-11-08 14:54:18:354 -- (2596) Bypassed all rules for: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl --  from mailto:bart@djfklasdk.com - bart@djfklasdk.com (Whitelisted EMail Address To)
01-11-08 14:54:18:401 -- (2596) Starting queueing procedures
01-11-08 14:54:18:401 -- (2596) EMail from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl was queued. Size: 71 KB, 72704 bytes
01-11-08 14:54:18:401 -- (3832) Sending email from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl --
01-11-08 14:54:18:416 -- (2596) Disconnect
01-11-08 14:54:18:916 -- (3832) EMail from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl --  was forwarded to iqmail.iqdomain2.nl:25
 
This mail got tagged.
 
Another example:
 
01-14-08 08:52:11:350 -- (1728) Connection from: 85.119.243.15  -  Originating country : Netherlands
01-14-08 08:52:11:538 -- (1728) Received MAIL FROM: < mailto:bart@djfklasdk.com - bart@djfklasdk.com >
01-14-08 08:52:11:538 -- (1728) Received RCPT TO: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl
01-14-08 08:52:11:569 -- (1728) Resolving 85.119.243.15 - mail.dutch.nl
01-14-08 08:52:11:960 -- (1728) - Invalid MX record -
01-14-08 08:52:11:960 -- (1728) 85.119.243.15 - Mail from: mailto:bart@djfklasdk.com - bart@djfklasdk.com To: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl will be spam-tagged
01-14-08 08:52:11:960 -- (1728) Bypassed all rules for: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl from mailto:bart@djfklasdk.com - bart@djfklasdk.com ( AutoWhiteList Force Delivery)
01-14-08 08:52:12:053 -- (1728) Bypassed all rules for: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl --  from mailto:bart@djfklasdk.com - bart@djfklasdk.com (Whitelisted EMail Address To)
01-14-08 08:52:12:116 -- (1728) Starting queueing procedures
01-14-08 08:52:12:116 -- (1728) EMail from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl was queued. Size: 36 KB, 36864 bytes
01-14-08 08:52:12:116 -- (1728) Starting bayesian procedures
01-14-08 08:52:12:132 -- (3988) Sending email from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl --
 



Replies:
Posted By: Guests
Date Posted: 15 January 2008 at 6:49am
And "Authorized To Emails" filter stops rejecting if you enable tagging:
 
01-15-08 12:45:54:195 -- (1240) - EmailTO is not in AuthorizedTOEmail list...
01-15-08 12:45:54:195 -- (1240) 217.77.137.85 - Mail from: mailto:fritzlv@taowoh.com - fritzlv@taowoh.com To: mailto:fritzlybar@informatique.nl - fritzlybar@infe.nl will be spam-tagged
01-15-08 12:45:54:257 -- (1240) EMail from mailto:fritzlv@taowoh.com - fritzlv@taowoh.com to mailto:fritzlybar@infe.nl - fritzlybar@infe.nl was queued. Size: 1 KB, 1024 bytes
01-15-08 12:45:54:257 -- (1240) Starting bayesian procedures
01-15-08 12:45:54:257 -- (1240) Starting queueing procedures
01-15-08 12:45:54:273 -- (9144) Sending email from mailto:fritzlv@taowoh.com - fritzlv@taowoh.com to mailto:fritzlybar@informatique.nl - fritzlybar@infe.nl --
01-15-08 12:45:54:288 -- (6524) Time to add Msg to Bayes corpus:0
01-15-08 12:45:54:320 -- (1240) Disconnect
01-15-08 12:45:54:679 -- (9144) EMail from mailto:fritzlv@taowoh.com - fritzlv@taowoh.com to mailto:fritzlybar@informatique.nl - fritzlybar@infe.nl --  was forwarded to iqmail.iqdomain2.nl:25


Posted By: LogSat
Date Posted: 15 January 2008 at 11:02pm
For the first post, we replicated the problem, it does look like a bug for now. We'll have that fixed shortly if so. Thanks for the report!

For he 2nd posting, if a "spam-tag" option is enabled, then spam emails will be delivered. So in that case, even if the recipient is not in the AuthorizedTO list, the email will be delivered (but marked as spam).


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: Guests
Date Posted: 16 January 2008 at 2:33am
Thnx for the response. I would really like this mail not to be delivered. Because it generates an enormous amount of bounces to and from my actual mailserver. Maybe there's a reason why you are forwarding this?



Print Page | Close Window