From EmailWhitelistRemove (and also the /Lists screen):

Per default a removal request is processed. To delete records from whitelistdb, write "delete" (unquoted) into the subject of the report mail.
NOTICE: removing whitelist entries will mark the records as NOT whitelisted!
NOTICE: deleting whitelist entries will DELETE ALL related records! For example: an emailaddress is globaly whitelisted but markted as not whitelisted for a specific domain. Now if you DELETE the domain based record, all domain related records will be deleted - but because of the global whitelisting, all emailaddresses from this domain are now treated as whitelisted!


I see there is a difference between "removal" and "deletion" - and testing confirms that only "deletion" actually deletes entries from the Whitelist database. I do not understand the purpose of "remove" instead of "delete". Can you please expand on this?

Daniel

On 9/25/2019 8:28 AM, Thomas Eckardt wrote:
RTM RTM RTM - or simply the GUI information completely

2018-05-29
fixed in assp 2.6.2 *Fortress* build 18148:


changed:

- admins are now able to remove global and domain based entries from whitelist using the emailinterface   admins are now able to delete global and domain based database records from the whitelistdb using the emailinterface   admins are now able to delete global and domain based database records from the whitelistdb using the webinterface (GUI)

'EmailWhitelistRemove','Remove from Whitelist Address'
  'Any mail sent by local/authenticated users to this username will be interpreted as a request to remove addresses from the whitelist. Do not put the full address here, just the user part.
   For example: asspnotwhite

  EmailAdmins and EmailAdminReportsTo are able to force global or domain based removal and deletion requests as well as removal and deletion requests for other users - like:

   sen...@domain.org,*
   sen...@domain.org,@localdomain.org
   sen...@domain.org,otheru...@localdomain.org

*  Per default a removal request is processed. To delete records from whitelistdb, write "delete" (unquoted) into the subject of the report mail.* *  NOTICE: removing whitelist entries **will mark the records**as NOT whitelisted!* *  NOTICE: deleting whitelist entries will DELETE ALL related records! For example: an emailaddress is globaly whitelisted but markted as not whitelisted for a specific domain.* *  Now if you DELETE the domain based record, all domain related records will be deleted - but because of the global whitelisting,*
*  all emailaddresses from this domain are now treated as whitelisted!*


Ken, you are annoying.

Thomas





Von: "K Post" <nntp.p...@gmail.com>
An: "ASSP development mailing list" <assp-test@lists.sourceforge.net>
Datum: 25.09.2019 15:05
Betreff: Re: [Assp-test] Trouble removing from whitelist (global and personal)
------------------------------------------------------------------------



SUMMARY: I'm in a worse spot than I thought. I don't seem to be able to remove any address from the whitelist. I don't remove addresses frequently.  I don't know how long this has been an issue. *I'm concerned that a verify in the list GUI shows different results that the address GUI and that I can't remove addresses at all it seems.*  What could I have misconfigured? What could I be doing wrong?

I've been using the lists GUI forever, long before the address icon became an option.  I like that the lists feature shows personal lists and that I can do things in bulk.  I also go there for tuplets.  But your suggestion is a good one, check somewhere else.  I entered that address into the address GUI, and incredibly, the only whitelist option is to add.  I assume that if the address GUI has ADD to Whitelist, that it doesn't think an address is whitelisted.    I don't know if that's looking at the personal whitelists too.

If I enter the same thing in the lists screen, it still shows
_scammer@gmail.com_ <mailto:scam...@gmail.com> Whitelisted
_scammer@gmail.com_ <mailto:scam...@gmail.com>,@OurCharity.org personal Whitelisted _scammer@gmail.com_ <mailto:scam...@gmail.com>,oneu...@ourcharity.org personal not Whitelisted So there's conflicting information as far as I understand it.  And I don't know what to do to fix this and figure out why it's happening.

Just to see if this would fix it, from the address window, I added to whitelist.  Then I removed from whitelist from there.  I went back to the lists window and did a verify. Unfortunately, there's no change, it still shows the 3 lines above.

I've never experienced /anything/ like with with ASSP before.  To test further, I found another whitelisted address (this one was legitimate). I tried simply entering _otheraddress@outsidesender.org_ <mailto:otheraddr...@outsidesender.org>(I also tried with _otheraddress@outsidesender.org_ <mailto:otheraddr...@outsidesender.org>,* based on the gui instructions)
I selected whitelist and remove and hit submit.
I get a message:
*_otheraddress@outsidesender.org_* <mailto:otheraddr...@outsidesender.org>* removed from Whitelist*
as I would expect.

However, doing a verify still shows
_otheraddress@outsidesender.org_ <mailto:scam...@gmail.com>, Whitelisted
_otheraddr...@outsidesender.org _ <mailto:scam...@gmail.com>,@OurCharity.org personal Whitelisted _otheraddr...@outsidesender.org _ <mailto:scam...@gmail.com>,us...@ourcharity.org personal Whitelisted _otheraddr...@outsidesender.org _ <mailto:scam...@gmail.com>,us...@ourcharity.org personal Whitelisted

The lists GUI says:
To add global whitelist entries use emailaddress .
To remove or delete global whitelist entries use emailaddress,* .
To add, remove or delete domain whitelist entries use emailaddress,@domain .

I usually only use the email address, not emailaddress,* to remove from all.  Have I been using the wrong removal syntax since the introduction of the personal whitelists all those years ago????   Maybe so and I never noticed because the gui seems to say I was successful on submit. Verify says otherwise.


On Tue, Sep 24, 2019 at 7:49 PM Daniel Miller via Assp-test <_assp-test@lists.sourceforge.net_ <mailto:assp-test@lists.sourceforge.net>> wrote:
On 9/24/2019 9:25 AM, K Post wrote:
Our users got a CEO spoofing email from a Gmail address.  One  user
replied, whitelisting the gmail address.  All is reported, now  I just
want to remove the address from the whitelist.

I can't get the address out of the whitelist.  I've got no idea  why.
I've done stuff like this for more than a decade on a regular basis. Have I gone mad, is something corrupted?  I'm stuck.

I did a verify first and got:

_scammer@gmail.com_
<mailto:scam...@gmail.com><mailto:_scammer@gmail.com_ <mailto:scam...@gmail.com>> Whitelisted
_scammer@gmail.com_
<mailto:scam...@gmail.com><mailto:_scammer@gmail.com_ <mailto:scam...@gmail.com>>,@OurCharity.org
     personal Whitelisted
_scammer@gmail.com_
<mailto:scam...@gmail.com><mailto:_scammer@gmail.com_ <mailto:scam...@gmail.com>>,oneu...@ourcharity.org
     personal Whitelisted

I admit it took me a bit to find what you're talking about - because I
don't use the "Lists" screen. Instead - I generally use the "Address
Actions" screen. If you know it and have already tried it then ignore
the paragraph.

Try opening the Address Actions, typing "_scammer@gmail.com_ <mailto:scam...@gmail.com>" into the
field, and press <TAB>. Regardless of what appears in the matches below
- click the drop down and review the available actions. If you see,
"Remove from Whitelist" it's still there - try submitting from this
screen. If you see "Add to Whitelist" - the entry was deleted previously.

I'm curious as to the results of the above.
--
Daniel



_______________________________________________
Assp-test mailing list_
__Assp-test@lists.sourceforge.net_ <mailto:Assp-test@lists.sourceforge.net>_
__https://lists.sourceforge.net/lists/listinfo/assp-test________________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************



_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to