If everything else fails, you could try to set an alias address and use the
WHITHELIST TO function (if you’re using the Pro version of Declude).  I did
it for a couple of difficult-to-fix false positive….
 
Usually the X-Declude-Sender is easy to whitelist… but this one looks like a
random string…
 
--------------------------------------
Vincent Toussaint
Administrateur de système - Sys Admin
 <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
T: (450) 227-4245 F: (450) 227-5245
  _____  

From: Kevin [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 25, 2007 3:06 PM
To: [email protected]
Subject: [IMail Forum] Whitelisting in Declude
 
Hello all,
 
I’m running ICS 2006 with Declude 3.1.  I’m having difficulties trying to
whitelist emails that come from Yahoo! Alerts.  Our CEO has setup these
alerts to email him articles based on certain keywords.  It seems that these
“alert” emails always get filtered out as Spam no matter what I try to
whitelist.  The IP address on the Received line seems to be different with
each new email.  I’ve tried whitelisting the following with out success:
 
WHITELIST   FROM  [EMAIL PROTECTED]
WHITELIST   FROM "Yahoo! Alerts" <[EMAIL PROTECTED]>
WHITELIST   FROM  [EMAIL PROTECTED]
WHITELIST   FROM [EMAIL PROTECTED]
 
Any ideas would be appreciated!
 
Below is an Internet Header from one of these emails:
 
Received: from n2.bullet.scd.yahoo.com [66.218.66.38] by
cottonwoodfinancial.com
  (SMTPD-9.10) id A91F041C; Fri, 25 May 2007 13:21:19 -0500
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024;
d=yahoo-inc.com;
 
b=Iu+p8HIeDRYTVfxzZy46T4sUw7xxb8quyag3K9vQs4aaqcZraiL9+M7kUxvlX3JS5A0OUVyNqJ
fdRQL2YfcGQiDpxLz9/3WTsVZ//bExBmYocNuFYq0mvpNaFb+6gN91a5A2+tfRdDqj5triYwEUdm
4g1IQ/baXqNWFmb+VhWps=;
Received: from [209.73.164.83] by n2.bullet.scd.yahoo.com with NNFMP; 25 May
2007 18:22:15 -0000
Received: from [66.94.229.221] by t7.bullet.scd.yahoo.com with NNFMP; 25 May
2007 18:22:15 -0000
Received: from [127.0.0.1] by dlv6.alerts.scd.yahoo.com with NNFMP; 25 May
2007 18:22:15 -0000
X-yahoo-newman-property: alerts
X-yahoo-newman-id: S0600435a0189- [EMAIL PROTECTED]
From: "Yahoo! Alerts" <[EMAIL PROTECTED]>
Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbImNhc2ggYW1lcmljYSJd?=
To: [EMAIL PROTECTED]
Reply-To: "Yahoo! Alerts" <[EMAIL PROTECTED]>
Return-Path: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit
X-Yahoo-AlertId:NcSwdrIxGXGwwkYHzHjRe8yO.LxrLKI-
X-Yahoo-Alerts-Beta: YES
Date: Fri, 25 May 2007 11:22:15 -0700
Message-Id: <[EMAIL PROTECTED]>
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail
detected.
X-RBL-Warning: IPNOTINMX: 
X-RBL-Warning: MXRATE-ALLOW: "GOOD SENDER"
X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records
[0301].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[4000020e].
X-RBL-Warning: NONENGLISH: Non-English text found in E-mail.
X-RBL-Warning: WEIGHT10: Weight of 29 reaches or exceeds the limit of 10.
X-Declude-Sender:
alerts.kmydmmbqgqztkyjqge4dslkjgv2e4msckndxovrykrkxonrvjm2u24tjkncgmmcuifqve
4txfu- [EMAIL PROTECTED] [66.218.66.38]
X-Declude-Spoolname: D291f00ba00006e87.smd
X-Declude-Note: Scanned by Declude 3.1.3 (http://www.declude.com/x-note.htm)
for spam.
X-Declude-Scan: Score [29] at 13:21:34 on 25 May 2007
X-Declude-Tests: MXRATE-ALLOW, MAILFROM, SPAMHEADERS, NONENGLISH, WEIGHT10,
WEIGHT14, WEIGHT16
X-Country-Chain: UNITED STATES->destination
X-RCPT-TO: <[EMAIL PROTECTED]>
Status:  
X-UIDL: 480033265
X-IMail-ThreadID: 291f00ba00006e87
 
Kevin Fenn
Information Technology Department
Cottonwood Financial, Ltd.
[EMAIL PROTECTED]
 

Reply via email to