I see what I think are problems with the way whitelisting occurs when using the 
asspnotspam function of the email interface.  This is on 2.0.1(1.1.28).

In the example below, I would expect only 
[email protected]<mailto:[email protected]> 
to be added to the whitelist, and perhaps 
bounce-879590_html-862063647-14143185-7507...@bounce.communications.trustwave.com.
  However, I definitely do not want addresses from my domain 
(thecjm.org<http://thecjm.org>) added to the whitelist, nor do I want .local 
addresses coming from Message-ID headers added.  Some addresses appear to be 
truncated as well.

My concern here is having irrelevant addresses cluttering the whitelist.


Response from asspnotspam:

[email protected]<mailto:[email protected]>:
 added to whitelist
[email protected]<mailto:[email protected]>,[email protected]<mailto:[email protected]>:
 added to whitelist
[email protected]<mailto:[email protected]>: 
added to whitelist
[email protected]<mailto:[email protected]>,[email protected]<mailto:[email protected]>:
 added to whitelist
[email protected]<mailto:[email protected]>: 
added to whitelist
[email protected]<mailto:[email protected]>,[email protected]<mailto:[email protected]>:
 added to whitelist
47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com<mailto:47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com>:
 added to whitelist
47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com<mailto:47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com>,[email protected]<mailto:[email protected]>:
 added to whitelist



Headers of email:

Received: from 
mta.communications.trustwave.com<http://mta.communications.trustwave.com/> 
(10.10.16.12) by
mail.thecjm.org<http://mail.thecjm.org/> (10.10.11.5) with Microsoft SMTP 
Server id 8.2.176.0; Tue, 31
Aug 2010 17:47:56 -0700
Received: from 
mta.communications.trustwave.com<http://mta.communications.trustwave.com/> 
([66.231.89.232]
helo=mta.communications.trustwave.com) by cjm-assp2.thecjm.lan with ESMTP
(2.0.1); 31 Aug 2010 17:52:31 -0700
Received: by 
mta.communications.trustwave.com<http://mta.communications.trustwave.com/> 
(PowerMTA(TM) v3.5r15) id
hfm7340ie1s9 for <[email protected]<mailto:[email protected]>>; Tue, 31 Aug 2010 
17:20:09 -0600
(envelope-from
<bounce-879590_html-862063647-14143185-7507...@bounce.communications.trustwave.com>)
From: Trustwave 
<[email protected]<mailto:[email protected]>>
To: IT_AV <[email protected]<mailto:[email protected]>>
Content-Class: urn:content-classes:message
Date: Tue, 31 Aug 2010 17:48:33 -0700
Subject: [FILTERED] Welcome to the TrustKeeper PCI DSS Compliance Program
Thread-Topic: [FILTERED] Welcome to the TrustKeeper PCI DSS Compliance
Program
Thread-Index: ActJb1JL8etJMiuKR3yN/ydOPzhWdg==
Message-ID: 
<[email protected]<mailto:[email protected]>>
List-Unsubscribe:
<mailto:leave-fca51c777c610d7d1a4c342838-fe251c767764027e731077-fe6415747460077c7d11-fef91375756307-ffc...@leave.communications.trustwave.com>
Reply-To: Trustwave
<reply-fe6415747460077c7d11-879590_html-862063647-7507...@communications.trustwave.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: cjm-exch1.TheCJM.lan
X-MS-Has-Attach:
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-Organization-SCL: 9
X-MS-TNEF-Correlator:
x-assp-delay: not delayed (gripvalue low: 0.12); 31 Aug 2010 17:52:31 -0700
x-assp-spam: YES
x-assp-spam-reason: MessageScore passed low limit
dkim-signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=200608;
d=communications.trustwave.com;
h=From:To:Subject:Date:List-Unsubscribe:MIME-Version:Reply-To:Message-ID:Content-Type:Content-Transfer-Encoding;
[email protected]<mailto:[email protected]>;
 bh=B6gxA/9SZFGUgHR1Lai21kKsmjo=;
b=wA+6A7SuzemZNTiiHQzCwY981V4rljahKmesPaLshlSrjrZ/8ZaZu6GxGFKg4qM+k2MCEAMnuudZ
 jsaGddQnMuf4cWRAnQZ3qKNEkIRmMtJqWksOOtQDtw168VfsoRMsGLLKcAFbmUixCgKlXr9+0IEM
 PyKhUeM4kxRDUvqmLKU=
x-spam-status: yes
x-job: 75073_14143185
x-assp-envelope-from:
bounce-879590_html-862063647-14143185-7507...@bounce.communications.trustwave.com
Content-Type: multipart/alternative;
boundary="_000_380dc3a458c94e10bdb1965395b820fbxtinmta12xtlocal_"
MIME-Version: 1.0
------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to