Kevin- Check your Declude logs to see why the messages are being dropped. You may need to go to LOGLEVEL HIGH or LOGLEVEL DEBUG for a few days to get the whole story. Be ready for really, really big log files if you do this. Use a good editor to find the first entry for the from address, and track it by the file name (*.smd) from there. Funduc Software's SR32 is a terrific tool for this.
Also, instead of whilelisting, try adding a negative weight in your filters file, like this: MAILFROM -10 ENDSWITH @yahoo-inc.com The actual weight would vary based on your weighting system. Be sure to put all negative weights at the beginning of the file so you don't max out the filter weight before the system encounters the negative values. Unlike whitelisting, this still allows spam checking, so if somebody is spoofing the address the message will still be checked for other faults. -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-7176 ----- Original Message ----- From: Kevin To: [email protected] Sent: Friday, May 25, 2007 3:05 PM Subject: [IMail Forum] Whitelisting in Declude Hello all, I'm running ICS 2006 with Declude 3.1. I'm having difficulties trying to whitelist emails that come from Yahoo! Alerts. Our CEO has setup these alerts to email him articles based on certain keywords. It seems that these "alert" emails always get filtered out as Spam no matter what I try to whitelist. The IP address on the Received line seems to be different with each new email. I've tried whitelisting the following with out success: WHITELIST FROM [EMAIL PROTECTED] WHITELIST FROM "Yahoo! Alerts" <[EMAIL PROTECTED]> WHITELIST FROM [EMAIL PROTECTED] WHITELIST FROM [EMAIL PROTECTED] Any ideas would be appreciated! Below is an Internet Header from one of these emails: Received: from n2.bullet.scd.yahoo.com [66.218.66.38] by cottonwoodfinancial.com (SMTPD-9.10) id A91F041C; Fri, 25 May 2007 13:21:19 -0500 Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024; d=yahoo-inc.com; b=Iu+p8HIeDRYTVfxzZy46T4sUw7xxb8quyag3K9vQs4aaqcZraiL9+M7kUxvlX3JS5A0OUVyNqJfdRQL2YfcGQiDpxLz9/3WTsVZ//bExBmYocNuFYq0mvpNaFb+6gN91a5A2+tfRdDqj5triYwEUdm4g1IQ/baXqNWFmb+VhWps=; Received: from [209.73.164.83] by n2.bullet.scd.yahoo.com with NNFMP; 25 May 2007 18:22:15 -0000 Received: from [66.94.229.221] by t7.bullet.scd.yahoo.com with NNFMP; 25 May 2007 18:22:15 -0000 Received: from [127.0.0.1] by dlv6.alerts.scd.yahoo.com with NNFMP; 25 May 2007 18:22:15 -0000 X-yahoo-newman-property: alerts X-yahoo-newman-id: S0600435a0189- [EMAIL PROTECTED] From: "Yahoo! Alerts" <[EMAIL PROTECTED]> Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbImNhc2ggYW1lcmljYSJd?= To: [EMAIL PROTECTED] Reply-To: "Yahoo! Alerts" <[EMAIL PROTECTED]> Return-Path: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 8bit X-Yahoo-AlertId:NcSwdrIxGXGwwkYHzHjRe8yO.LxrLKI- X-Yahoo-Alerts-Beta: YES Date: Fri, 25 May 2007 11:22:15 -0700 Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: IPNOTINMX: X-RBL-Warning: MXRATE-ALLOW: "GOOD SENDER" X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records [0301]. X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000020e]. X-RBL-Warning: NONENGLISH: Non-English text found in E-mail. X-RBL-Warning: WEIGHT10: Weight of 29 reaches or exceeds the limit of 10. X-Declude-Sender: alerts.kmydmmbqgqztkyjqge4dslkjgv2e4msckndxovrykrkxonrvjm2u24tjkncgmmcuifqve4txfu- [EMAIL PROTECTED] [66.218.66.38] X-Declude-Spoolname: D291f00ba00006e87.smd X-Declude-Note: Scanned by Declude 3.1.3 (http://www.declude.com/x-note.htm) for spam. X-Declude-Scan: Score [29] at 13:21:34 on 25 May 2007 X-Declude-Tests: MXRATE-ALLOW, MAILFROM, SPAMHEADERS, NONENGLISH, WEIGHT10, WEIGHT14, WEIGHT16 X-Country-Chain: UNITED STATES->destination X-RCPT-TO: <[EMAIL PROTECTED]> Status: X-UIDL: 480033265 X-IMail-ThreadID: 291f00ba00006e87 Kevin Fenn Information Technology Department Cottonwood Financial, Ltd. [EMAIL PROTECTED]
