Dear ALL,

I'm a using spamfilter ISP v 4.1.2.796, and I have the following problem, I'll try to explain :

I have spams sended to direction@some domain on our plateform witch still pass, even if the spam contain keywords activated by all RCPT TO domains except the first one (multiple RCPT TO on the same thread, probably CC our CCI).

The first RCPT TO was whitelisted : in logs : bypassed all rules for: direction@xxxxx from xxx@xxx ( Whitelisted EmailTO).
On the same thread (same number of thread in logs), the connection has other RCPT TO other direction@some other domain on our plateform without the whitelisted EmailTo (because EmailTo is different), and with keywords filter activated, that normaly match with the body of spam. On all other RCPT TO than the first one the first rule ( Whitelisted EmailTO) is applied. So all others emails like direction@domains received the spam... It's a problem, because we have more and more spam of this type, but we can't, for some clients, disable some whitelisted EmailTo functions... Is there a way to fix this ?

Thank you,
Best regards.


Edited by Shade - 13 January 2009 at 3:17am