Greylisting and whitelisting issues
Posted: 29 Dec 2016 13:19
I recently installed EFA and while generally it seems to be working fine, I do have 2 issues I cant seem to figure out...
SpamAssassin keeps marking mail from a valid mailing list as spam. Even if I include the sender to the whitelist, the e-mails still get marked as spam by SpamAssassin every time. I trained a number of these e-mails as HAM, but that also doesn't seem to help.
SpamAssasin returns these scores every time. However when a sender is whitelisted, shouldn't spamassasin just let the e-mail pass??
The second problem is greylisting. A class C addres for facebook has been included in the whitelisted domains:
However a whole bunch of e-mails is queued from various IP addresses in the whitelisted class c ip:
Why is that?
SpamAssassin keeps marking mail from a valid mailing list as spam. Even if I include the sender to the whitelist, the e-mails still get marked as spam by SpamAssassin every time. I trained a number of these e-mails as HAM, but that also doesn't seem to help.
SpamAssasin returns these scores every time. However when a sender is whitelisted, shouldn't spamassasin just let the e-mail pass??
Code: Select all
Score Matching Rule Description
-1.15 AWL Adjusted score from AWL reputation of From: address
0.00 HTML_MESSAGE HTML included in message
0.75 KAM_INFOUSMEBIZ Prevalent use of .info|.us|.me|.me.uk|.biz domains in spam/malware
1.00 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods
1.10 MIME_HTML_ONLY Message only has text/html MIME parts
-0.00 RCVD_IN_DNSWL_NONE Sender listed at http://www.dnswl.org/, no trust
2.00 TO_NO_BRKTS_HTML_ONLY To: lacks brackets and HTML only
2.30 URI_NO_WWW_INFO_CGI CGI in .info TLD other than third-level "www"The second problem is greylisting. A class C addres for facebook has been included in the whitelisted domains:
Code: Select all
facebookmail.com 69.171.232 2016-12-16 13:08:38Code: Select all
notification+kr4mryxbqr5a facebookmail.com 69.171.232.167 ***@***.** 2016-12-29 07:44:08
notification+kr4mryxbqr5a facebookmail.com 69.171.232.175 ***@***.** 2016-12-29 07:25:20
notification+kr4mryxbqr5a facebookmail.com 69.171.232.170 ***@***.** 2016-12-29 08:21:24
notification+zj4oc=j0994y facebookmail.com 69.171.232.170 ***@***.** 2016-12-29 13:27:56
notification+zj4oc=j0994y facebookmail.com 69.171.232.166 ***@***.** 2016-12-29 09:15:38
notification+zj4oc=j0994y facebookmail.com 69.171.232.161 ***@***.** 2016-12-29 09:56:54
notification+zj4oc=j0994y facebookmail.com 69.171.232.168 ***@***.** 2016-12-29 08:52:16