Whitelist doesn't work?

[rexxer777]

Hi,

I have an issue with whitelisting. The PMG is the latest and with the subscription.
My rules:


Whitelist regexp with check OK:


But it was blocked with the next rules:

2024-01-11T07:41:42.014385-08:00 pmg postfix/smtpd[2612127]: connect from smtp07-ia4-sp4.mta.salesforce.com[13.110.74.182]
2024-01-11T07:41:42.534507-08:00 pmg postfix/smtpd[2612127]: 82716403AB: client=smtp07-ia4-sp4.mta.salesforce.com[13.110.74.182]
2024-01-11T07:41:42.682391-08:00 pmg postfix/cleanup[2611607]: 82716403AB: message-id=<QwmFh000000000000000000000000000000000000000000000S73SXE00SpIgD15eRyWzJ7zwJHahDA@sfdc.net>
2024-01-11T07:41:42.683503-08:00 pmg postfix/qmgr[2606854]: 82716403AB: from=<support=sisense.com__0-z5w2bouacr4ljp.ygc9vaglobh7k7s9@3kw9qqvs3riox2l7.57b9c3.d-f5wneay.na169.bnc.salesforce.com>, size=5954, nrcpt=1 (queue active)
2024-01-11T07:41:42.787608-08:00 pmg pmg-smtp-filter[2611990]: 403AD65A00C36BE712: new mail message-id=<QwmFh000000000000000000000000000000000000000000000S73SXE00SpIgD15eRyWzJ7zwJHahDA@sfdc.net>#012
2024-01-11T07:41:43.448631-08:00 pmg pmg-smtp-filter[2611990]: 403AD65A00C36BE712: SA score=18/5 time=0.585 bayes=0.00 autolearn=no autolearn_force=no hits=AWL(-1.781),BAYES_00(-1.9),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),DKIM_VALID_AU(-0.1),DMARC_PASS(-0.1),ENA_SUBJ_ODD_CASE(2.6),HEADER_FROM_DIFFERENT_DOMAINS(0.249),HTML_IMAGE_ONLY_16(1.092),HTML_MESSAGE(0.001),KAM_BODY_URIBL_PCCC(9),KAM_FROM_URIBL_PCCC(9),KAM_LOTSOFHASH(0.25),RCVD_IN_MSPIKE_H4(0.001),RCVD_IN_MSPIKE_WL(0.001),SPF_HELO_NONE(0.001),SPF_PASS(-0.001),T_SCC_BODY_TEXT_LINE(-0.01)
2024-01-11T07:41:43.501229-08:00 pmg pmg-smtp-filter[2611990]: 403AD65A00C36BE712: bcc to <xxxxxxxxx> (rule: Block Spam (Level 10), 6F4CE403B6)
2024-01-11T07:41:43.501348-08:00 pmg pmg-smtp-filter[2611990]: 403AD65A00C36BE712: block mail to <xxxxxxxxx> (rule: Block Spam (Level 10))
2024-01-11T07:41:43.503167-08:00 pmg pmg-smtp-filter[2611990]: 403AD65A00C36BE712: processing time: 0.721 seconds (0.585, 0.054, 0)
2024-01-11T07:41:43.503885-08:00 pmg postfix/lmtp[2612215]: 82716403AB: to=<xxxxxxxxx>, relay=127.0.0.1[127.0.0.1]:10024, delay=1, delays=0.22/0.05/0.04/0.72, dsn=2.7.0, status=sent (250 2.7.0 BLOCKED (403AD65A00C36BE712))
2024-01-11T07:41:43.504171-08:00 pmg postfix/qmgr[2606854]: 82716403AB: removed
2024-01-11T07:41:47.757897-08:00 pmg postfix/smtpd[2612127]: disconnect from smtp07-ia4-sp4.mta.salesforce.com[13.110.74.182] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7

As I see it has spam score 18 from Spamassassin URIBL and was blocked with rule: Block Spam (Level 10).

Why? As I know Accept in the Whitelist is the final action.

 

[Stoiko Ivanov]

Please try to add '.*' in the beginning of your regex - the match is anchored for who-objects

 

[rexxer777]

The regexp check was failed in this case: *.sisense\.com.*

 

[rexxer777]

The same issues with e-mail: noreply@redditmail in Whitelist. The letters go to Quarantine anyway.

 

[Stoiko Ivanov]

The regexp check was failed in this case: *.sisense\.com.*

yes - because it is a regular expression '.*' is the wildcard to match everything...
try '.*sisense\.com.*'

 

[rexxer777]

Thanks. It seems that the solution works.