Hi Scott, If the return address is the same as "Reply-To" (in this case "@TIMES - Inside NYTimes.com" <[EMAIL PROTECTED]>" - see header include with original message) I'm assuming that we're looking at [EMAIL PROTECTED] Thus, @nytimes.com should work.
> From: "Michael Ernst" <[EMAIL PROTECTED]> > Subject: [Declude.JunkMail] Whitelist problems > Date: Wed, 16 Jan 2002 15:40:21 -0500 > Reply-To: [EMAIL PROTECTED] > Can anyone tell me why the following message was not Whitelisted (one of > many)? Seems to be an exact match for text and case. Using JunkMail > Standard Beta 1.31 and our Global.cfg contains the following Whitelist > entry: > > WHITELIST FROM @nytimes.com > > > Received: from content120a.lga2.nytimes.com [64.15.247.66] by > nova.whrc.org > with ESMTP > (SMTPD32-7.04) id A1D780C500E4; Wed, 16 Jan 2002 15:25:59 -0500 > Received: from omitted by content120a.lga2.nytimes.com (LSMTP for > Windows NT > v1.1b) with SMTP id <[EMAIL PROTECTED]>; > Wed, 16 Jan > 2002 15:20:04 -0500 > To: [EMAIL PROTECTED] > Subject: SPAM? [See Headers] Portraits of Grief - Read Profiles of WTC > Victims > From: "@TIMES - Inside NYTimes.com" <[EMAIL PROTECTED]> > Date: Wed, 16 Jan 2002 15:01:21 -0500 > Reply-To: "@TIMES - Inside NYTimes.com" <[EMAIL PROTECTED]> > Content-Type: text/plain > Content-Transfer-Encoding: 7bit > Message-Id: <[EMAIL PROTECTED]> > X-RBL-Warning: Open relay. Please see http://orbz.org/?64.15.247.66 > X-RBL-WARNING: Suspected SPAM. This E-mail has headers consistent > with spam > [40000202]. > X-RBL-WARNING: Suspected SPAM - HEUR10. Heuristic spam detection level 10 > [0.999996] > X-Declude-Spoolname: De1d70e4.SMD > X-Note: This E-mail was scanned @ WHRC by Declude JunkMail > (www.declude.com) > for spam. > > > Most likely, it had a return address of something like > "[EMAIL PROTECTED]", rather than > "[EMAIL PROTECTED]". If you > change it to "WHITELIST FROM nytimes.com", that would whitelist > "[EMAIL PROTECTED]". > -Scott > > --- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
