Hi.
I have 2 scenario's where I want PMG to treat a message as spam.
1. If the SpamAssassin score is >= 5
2. If my upstream filter has already prepended the subject with "SPAM"
I have rules to accomplish this, and it works fine. However, the user whitelist isn't working as expected for me.
My mail filter rules are:
#81
In case #1, I send an email from an email that is whitelisted by the recipient. PMG recognises this and even though the SA score is >= 5, it continues to deliver the message onwards. This is what I expect to happen.
In case #2, I send the same email but prepend the subject with "SPAM". PMG recognises that the sender is whitelisted by the user, but still sends the message to quarantine.
Here's the logs from the 2 attempts:
#1: Email that gets a SA score of 5
#2: Same email with "SPAM" subject
Any thoughts on why these two cases are treated differently with regards to user whitelist?
Rich
I have 2 scenario's where I want PMG to treat a message as spam.
1. If the SpamAssassin score is >= 5
2. If my upstream filter has already prepended the subject with "SPAM"
I have rules to accomplish this, and it works fine. However, the user whitelist isn't working as expected for me.
My mail filter rules are:
#81
- What = Spam level 5
- Action = Modify Spam Subject; Quarantine
- What = External Tagged
- Match field: Subject=^SPAM:
- Action = Quarantine
In case #1, I send an email from an email that is whitelisted by the recipient. PMG recognises this and even though the SA score is >= 5, it continues to deliver the message onwards. This is what I expect to happen.
In case #2, I send the same email but prepend the subject with "SPAM". PMG recognises that the sender is whitelisted by the user, but still sends the message to quarantine.
Here's the logs from the 2 attempts:
#1: Email that gets a SA score of 5
Code:
...
Sep 30 12:47:14 scrub1 pmg-smtp-filter[11677]: 440E15D914276AD490: SA score=5/5 time=11.790 bayes=undefined autolearn=no autolearn_force=no hits=AWL(0.191),DATE_IN_PAST_96_XX(2.07),HTML_MESSAGE(0.001),HTML_MIME_NO_HTML_TAG(0.635),INVALID_MSGID(1.167),KAM_INFOUSMEBIZ(0.75),MIME_HTML_ONLY(0.1),RDNS_DYNAMIC(0.363),SPF_HELO_NONE(0.001),SPF_PASS(-0.001),T_KAM_HTML_FONT_INVALID(0.01)
Sep 30 12:47:14 scrub1 pmg-smtp-filter[11677]: 440E15D914276AD490: sender in user (test@test.xxxxxxxxxx.me.uk) whitelist
... delivery continues to recipient mail server (transport)#2: Same email with "SPAM" subject
Code:
...
Sep 30 13:32:57 scrub1 pmg-smtp-filter[11678]: 440E15D914D2D8EFC2: SA score=5/5 time=11.330 bayes=undefined autolearn=no autolearn_force=no hits=AWL(0.249),DATE_IN_PAST_96_XX(2.07),HTML_MESSAGE(0.001),HTML_MIME_NO_HTML_TAG(0.635),INVALID_MSGID(1.167),KAM_INFOUSMEBIZ(0.75),MIME_HTML_ONLY(0.1),RDNS_DYNAMIC(0.363),SPF_HELO_NONE(0.001),SPF_PASS(-0.001),T_KAM_HTML_FONT_INVALID(0.01)
Sep 30 13:32:57 scrub1 pmg-smtp-filter[11678]: 440E15D914D2D8EFC2: sender in user (test@test.xxxxxxxxxx.me.uk) whitelist
Sep 30 13:32:57 scrub1 pmg-smtp-filter[11678]: 440E15D914D2D8EFC2: moved mail for <test@test.xxxxxxxxxx.me.uk> to spam quarantine - 61A785D914D3901953 (rule: Quarantine/Mark Spam (External Tagged))Any thoughts on why these two cases are treated differently with regards to user whitelist?
Rich