On Wed, 23 Mar 2016 16:33:16 -0000, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:

On 23.03.16 16:06, Kevin Golding wrote:
Well the whitelisting failure was the first debug I posted, to clarify.

When using (only):

def_whitelist_auth  *@*.bbcmail.co.uk

The debug is:

Mar 23 11:17:44.805 [15610] dbg: dkim: VALID signature by e.bbcmail.co.uk, author b...@e.bbcmail.co.uk, no valid matches Mar 23 11:17:44.805 [15610] dbg: dkim: author b...@e.bbcmail.co.uk, not in any dkim whitelist

Therefore the following all successfully whitelist the test mail from b...@e.bbcmail.co.uk (each tested individually and not in a combined scan):

please put these two lined to your config at once:

whitelist_from_dkim *@*.bbcmail.co.uk
def_whitelist_auth  *@*.bbcmail.co.uk

and run the mail through spamassassin -D

Oddly, that gets a different result this time:

Mar 23 17:44:24.418 [33341] dbg: dkim: VALID author domain signature by e.bbcmail.co.uk, MATCHES def_whitelist_auth ^.*\@.*\.bbcmail\.co\.uk$ Mar 23 17:44:24.418 [33341] dbg: dkim: VALID author domain signature by e.bbcmail.co.uk, MATCHES whitelist_from_dkim (?^i:^.*\@.*\.bbcmail\.co\.uk$) Mar 23 17:44:24.418 [33341] dbg: dkim: author b...@e.bbcmail.co.uk, WHITELISTED by def_whitelist_auth/e.bbcmail.co.uk, whitelist_from_dkim/e.bbcmail.co.uk

Which led to more testing and the lone def_whitelist_auth *@*.bbcmail.co.uk line works too.

I think I may have got caught out by a change of domains at the BBC. Checking my changelogs I originally had *@*.bbcemail.co.uk - this logically worked fine for a while, however I noticed it not doing so lately.

In my testing I added in other rules using the current domain *.bbcmail.co.uk and they worked, without noticing the original typo. Even transcribing it for the list I used the new domain instead of the original rule. So when I started afresh for the latest test it worked fine, and that's when the error got flagged up.

Cheers chaps! PEBCAK

Reply via email to