Here's a sample of headers from a test. Below the headers is a snip from the log file that shows the whitelist is invoked.
****headers begin here**** Microsoft Mail Internet Headers Version 2.0 Received: from msx.renoairport.com ([192.168.1.246]) by msx.renoairport.com with Microsoft SMTPSVC(6.0.3790.0); Tue, 16 Mar 2004 11:17:25 -0800 Received: from sdf.lonestar.org [192.94.73.20] by msx.renoairport.com with ESMTP (SMTPD32-8.05) id A3DC4A025C; Tue, 16 Mar 2004 11:22:04 -0800 Received: from sdf.lonestar.org (IDENT:[EMAIL PROTECTED] [192.94.73.1]) by sdf.lonestar.org (8.12.10/8.12.10) with ESMTP id i2GJIRVv026770; Tue, 16 Mar 2004 19:18:27 GMT Received: (from [EMAIL PROTECTED]) by sdf.lonestar.org (8.12.10/8.12.8/Submit) id i2GJIQgD024219; Tue, 16 Mar 2004 19:18:26 GMT Date: Tue, 16 Mar 2004 19:18:26 +0000 (UTC) From: corby <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: whitelist test Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-RBL-Warning: CATCHALLMAILS: X-Declude-Sender: [EMAIL PROTECTED] [192.94.73.20] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 16 Mar 2004 19:17:25.0458 (UTC) FILETIME=[50A53320:01C40B8B] ****end of headers***** ****snippet from log*** 03/16/2004 11:22:10 Q53dc004a025cb43b MS-CLEAN:-1 . Total weight = -1 03/16/2004 11:22:10 Q53dc004a025cb43b E-mail whitelisted - automatically passing all spam tests [EMAIL PROTECTED] 03/16/2004 11:22:10 Q53dc004a025cb43b Using [incoming] CFG file C:\IMail\Declude\renoairport.com\$default$.junkmail. 03/16/2004 11:22:10 Q53dc004a025cb43b Msg failed CATCHALLMAILS (). Action=WARN. 03/16/2004 11:22:10 Q53dc004a025cb43b L1 Message OK 03/16/2004 11:22:10 Q53dc004a025cb43b Subject: whitelist test 03/16/2004 11:22:10 Q53dc004a025cb43b From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 192.94.73.20 ID: i2GJIRVv026770 03/16/2004 11:22:10 Q53dc004a025cb43b Using [incoming] CFG file C:\IMail\Declude\renoairport.com\$default$.junkmail. 03/16/2004 11:22:10 Q53dc004a025cb43b Msg failed CATCHALLMAILS (). Action=WARN. 03/16/2004 11:22:10 Q53dc004a025cb43b L2 Message OK 03/16/2004 11:22:10 Q53dc004a025cb43b Subject: whitelist test 03/16/2004 11:22:10 Q53dc004a025cb43b From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 192.94.73.20 ID: i2GJIRVv026770 03/16/2004 11:22:10 Q53dc004a025cb43b Last action = IGNORE. ***** end of log snippet***** -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, March 16, 2004 10:59 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Whitelist warning headers? >I've never seen "whitelisted" in a header. I just made a simple >whitelist rule for testing, and it doesn't seem to add the header. What does the header show if the E-mail is whitelisted? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.