Sender is whitelisted but moved to quarantine

[karnz]

Hello,

From this log.

Nov 27 10:16:42 mxgw pmg-smtp-filter[309070]: 419315BFCB7162A22A: SA score=9/5 time=3.859 bayes=1 autolearn=no autolearn_force=no hits=AWL,BAYES_99,BAYES_999,DCC_CHECK,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FROM_EXCESS_BASE64,HTML_IMAGE_RATIO_02,HTML_MESSAGE,KAM_HUGEIMGSRC,KAM_REALLYHUGEIMGSRC,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,SPF_PASS
Nov 27 10:16:42 mxgw pmg-smtp-filter[309070]: 419315BFCB7162A22A: sender in user (xxx@yyy.com) whitelist
Nov 27 10:16:42 mxgw pmg-smtp-filter[309070]: 419315BFCB7162A22A: moved mail for <xxx@yyy.com> to spam quarantine - 419345BFCB71A584B1
Nov 27 10:16:42 mxgw pmg-smtp-filter[309070]: 419315BFCB7162A22A: processing time: 4.218 seconds (3.859, 0.294)
Nov 27 10:16:42 mxgw postfix/lmtp[308171]: 8F4A7403C7: to=<xxx@yyy.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=14, delays=9.4/0/0.04/4.2, dsn=2.5.0, status=sent (250 2.5.0 OK (419315BFCB7162A22A))
Nov 27 10:16:42 mxgw postfix/qmgr[153510]: 8F4A7403C7: removed

How possible?

 

[dietmar]

Its not possible. Seems you modified hat log? I assume the email addresses are different.

 

[karnz]

No I didn't modify the log except the masked address xxx@yyy.com.

However, now I know the reason, sender domain is in global blacklist.
Question is why it doesn't passed the filter although address sender@sender.com is already in user's whitelist?

This will not happen if sender@sender.com is in global whitelist.

 

[tom]

Maybe your rule system config and priorities are not correct.

 

[karnz]

Tried to figure out what's wrong on my setup but not found any. Its stable for weeks and just see above error today. Just rebooted the server and waiting the result.

My priorities set for whitelist (59) is higher than blacklist (50). Priorities greater than 59 is Virus and Dangerous file blocking. This should be alright.
Does the whitelist rule also included user's whitelist too? I can see only global whitelist on From Object can be selected.