[SOLVED] Which "From" Do Whitelists Operate On?

[utkonos]

Using the "Whitelist" button in the Quarantine area adds the "From" address shown on that page to the user's whitelist. Adding that same email address to the global whitelist should allow the same, but for all users on the mail gateway. However, I have noticed that some email is still being quarantined even though the correct email address is in one or both of those locations.

Which "From" does Proxmox operate on: the "From:" header, or the envelope from or both?

It appears from my experience so far that only the envelope from is operated on and the From: header is ignored. I think this is happening because a user has whitelisted an email using the button in Quarantine which used the header "From: noreply@example.com", but the envelope from of the same message if you look at the from field in the tracking center is "bounces-foo-bar-baz-1234567@foobar.example.com".

Is the above correct, or am I missing something crucial to how whitelists function?

 

[Stoiko Ivanov]

Which "From" does Proxmox operate on: the "From:" header, or the envelope from or both?

The envelope addresses in the rulesystem are matched by Who Objects, if you want to match on the from header - use a 'Match Field' What object.

see also
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_whitelist_overview

I hope this explains it!

 

[utkonos]

What should users who click the button in the quarantine management area expect to happen? That area uses the From header as the content that the Whitelist button operates on.