ConfigServer Community Forum

mail shows as white listed in Mail watch and no such domains are whitelisted in /usr/mailscanner/etc

the mail scanner recently was reinstalled by your folks on a new server drive after drive failure

Ive seen some kinda wacky things in mail scanner - today an email is whitelisted in mail watch BUT that domain is not listed in the spam.whitelist.rules


Ive also seen different email that wasnt being scored or scanned by mail scanner - they show as having Zero score - the mail watch entry reads as score "large" Matching rule "too"


Any ideas ?

I'm not sure about the whitelisting, but if it is being shown in the *SpamAssassin* report in MailWatch as whitelisted, then it is probably a SpamAssassin whitelist issue and not a MailScanner issue.

If you are seeing a lot of obvious spam getting through with "too large" in the Spam Report, you can change "Max Spamassassin Check Size" in the MailScanner Configuration to something a bit more sensible. The default is 250, I change it to 500 when I install, but you can make it larger if needed.

Regards,
Sarah

Sarah

Thanks for the tip on the size

Ive changed it to 500

Ive looked through the mailscanner interface to figure out where this domain is whitelisted and cant find it

Do you know where else I can look for the Spamassasin whitelist ?

Some of the spamassassin whitelist files are in /usr/share/spamassassin/ in files with "whitelist" in the name. There is also an auto-whitelist feature which I believe should be turned off by default, check /etc/mail/spamassassin/mailscanner.cf for the line:

use_auto_whitelist 0

If you see that, it is turned off.

Regards,
Sarah