I just got a nice spam that was failing tons of tests, until it was whitelisted and I have no idea why. The logs don't actually give a reason as to why an email is whitelisted (right?), and the only whitelisting I do are certain emails listed in my global.cfg file and Whitelist AUTH. Otherwise, nothing else is whitelisted. My list of whitelisted emails is small and I looked there first, but can't find anything.
Here are the headers of the email: Received: from 49CAAFF0 [221.126.254.191] by mail.domain.com (SMTPD-8.22) id AD3F1145C; Tue, 28 Mar 2006 08:50:39 -0600 Message-ID: <[EMAIL PROTECTED]> Received: from [221.126.254.191] by acromiohyoid via HTTP; Tue, 28 Mar 2006 06:50:29 -0800 Date: Tue, 28 Mar 2006 06:50:29 -0800 From: Isaac Jensen <[EMAIL PROTECTED]> Subject: need a hug? To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit X-Declude-Sender: [EMAIL PROTECTED] [221.126.254.191] X-Declude-Spoolname: D4d3c03e20000f4e2.smd X-Note: This E-mail was sent from [No Reverse DNS] ([221.126.254.191]). X-Spam-Tests-Failed: Whitelisted [0] X-Tests: Whitelisted X-Note: Queue name: D4d3c03e20000f4e2.smd X-Note: Sent To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] X-Note: FROM:[EMAIL PROTECTED] X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 440033127 X-IMail-ThreadID: 4d3c03e20000f4e2 I replaced the domain that it was sent to with "domain.com". Now, the thing is, the from "[EMAIL PROTECTED]" is not in our Imail system, I don't even know any hslherrod. BUT, there is an [EMAIL PROTECTED], which I'm not sure even plays a part here. Any suggestions on where I should look next? thanks ernesto --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
