* This is the modus mailing list *

>From my investigation...

It appears the Whitelist looks at the address only in the envelope of
the message and not the headers of the message.  This would be the email
address that is used in the SMTP 'MAIL FROM' command and typically shows
up at the top of the headers as the 'Return-path:' header.

This header CAN BE different than the 'From:' header.

Therefore, your whitelist should contain the address that is shown in
the 'Return-path:' header and not the 'From:' header.

The problem here is that the area of the console's quarantine window
where a message is dissected seems to display the 'From:' header and,
disappointingly does not display the 'Return-path:' header (even in the
'Headers' or 'Raw Data' tabs).  HOWEVER, it does display the 'MAIL FROM'
address in the message list of the quarantine.

Therefore, the email address you must put in your whitelist is the email
address found in the message list at the bottom of the quarantine window
and not the address found at the top of the quarantine window.

All that said, the quarantine report emailed to the end user displays
the correct email address to put in the whitelist.  HOWEVER, the
end-user's quarantine in WebMail shows the INCORRECT address and the
end-user will not be able to determine the correct address to put into
the whitelist unless they release the message and then check it's
headers through outlook express. (since headers are STILL not available
through webmail)

These are some discrepancies that I believe should be visited for the
first Modus3 patches to ensure the whitelists are effective and not a
support headache.

- Del
 
 
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf
> Of Robin Keller
> Sent: Thursday, November 06, 2003 1:10 PM
> To: [EMAIL PROTECTED]
> Subject: [Modus] whitelist question - bug?
> 
> * This is the modus mailing list *
> 
> in reviewing quarantine for false pos's -- found a e-newsletter email
> address want to whitelist since they keep getting quarantined for
various
> customers.
> 
> i noticed the from email in the header info [EMAIL PROTECTED]
> doesn't match up with the actual from email address for all the
recipients
> as displayed in the 'From' column of a 'Find Result' search from the
> quarantine.
> 
> i'm wondering if that might be the reason why some of my personal
emails
> were getting quarantined by mistake when the from email address in the
> header is whitelisted -- but the actual from email address is not.
> 
> for ex.. one of my messages that got quarantined by mistake has the
from
> email address of [EMAIL PROTECTED] -- which is the
email
> address i have added to my whitelist -- but the actual from email
address
> appears to be [EMAIL PROTECTED]
> 
> thoughts??
> 
> -=bina
> 
> 
> **
> To unsubscribe, send an Email to: [EMAIL PROTECTED]
> with the word "UNSUBSCRIBE" in the body or subject line.


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.

Reply via email to