Spam Filter ISP Support - whitelist error

whitelist error

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6930
Printed Date: 27 December 2024 at 9:02am

Topic: whitelist error

Posted By: danego
Subject: whitelist error
Date Posted: 22 March 2011 at 4:20pm

I send my problem to mailto:support@logsat.com - support@logsat.com last friday but no answer yet.

One of our clients have their website hosted at some isp location.

This webserver has been sending spam and the ip address is listed on blacklists.

When our client sends out an email they put their domainname in the signature.

( http://www.example.nl - www.example.nl )

If someone replies to this message the message gets blocked in our spamfilter.

521 A URL ( http://www.example.nl - www.example.nl ) in the email resolved to a blacklisted IP: 521 The IP 94.124.94.198 is Blacklisted by cbl.abuseat.org. Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=94.124.94.198 - http://cbl.abuseat.org/lookup.cgi?ip=94.124.94.198 -- .>

I have put the ip address and the domainname on the whitelist :

D:\SpamFilter\domains\SFI\whitelist-domains.txt

If doesn’t seem to work.

Is this the wrong whitelist? Or is there something else I need to do?

(spamfilter version v.4.2.4.834)

Regards,

Emiel

Replies:

Posted By: LogSat
Date Posted: 22 March 2011 at 9:54pm

Emiel,

This email is causing us both some issues Smile

your original email to us on Friday was blocked, we did receive your second one early this morning, but you may have not received our reply to that one later this morning. Here is it again:

==================

Emiel,

I'm sorry, your original email was allowed thru by our SpamFilter, but our email client's own junk mail filter intercepted it and we never saw it.

In your case, the email was blocked because the URL (www.trias......die.nl) resolves to an IP address (94.124.94.198) that is blacklisted. The filter that is causing this is the "Resolve URLs in emails & check IPs in MAPS", which can be found by following the following screenshot:
http://www.logsat.com/sfi-spam-filter-screenshots/sfi-filtering-options.asp - This filter goes thru all URLs in an email, and for each checks if they resolve to an IP which is blacklisted. If it the IP is blacklisted, the email is blocked. It is not possible to exclude specific domains from this filter, however you could add the domain name that is being blocked to SpamFilter's "keyword whitelist". If SpamFilter finds in the email's body and headers a keyword in that whitelist, it will force delivery of that email.

I hope this helps,

Roberto Franceschetti
LogSat Software

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: yapadu
Date Posted: 23 March 2011 at 1:11am

I see this problem from time to time as well. A domain that is hosted by our spamfilter gets themselves on the blacklist and then any mention of the domain causes quarantine.

When I see it, I remove the SURBL list checking for their domain. That fixes it, of course more spam could get through but there are a lot less messages in quarantine that should not be.

If only they could keep themselves off the blacklists...

-------------
--------------------------------------------------------------
I am a user of SF, not an employee. Use any advice offered at your own risk.

Posted By: danego
Date Posted: 23 March 2011 at 3:38am

Putting the name on the keyword whitelist is an option.

I've put the domainname on there let's see if it will work :)