Print Page | Close Window

I do not understand why this email was blocked

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6932
Printed Date: 27 December 2024 at 10:10am


Topic: I do not understand why this email was blocked
Posted By: Terry
Subject: I do not understand why this email was blocked
Date Posted: 31 March 2011 at 4:57pm
A message came in and followed this process:
 
03/25/11 09:47:00:185 -- (2312) Detected TCP Connection: 137.53.6.162
03/25/11 09:47:00:200 -- (2312) Connection from: 137.53.6.162  -  Originating country : United States
03/25/11 09:47:00:481 -- (2312) Received MAIL FROM: < mailto:prvs=40659F78CE=hinrichs@ohsu.edu - prvs=40659F78CE=hinrichs@ohsu.edu >
03/25/11 09:47:00:528 -- (2312) Received RCPT TO: mailto:Gail.Woodworth@portofportland.com - Gail.Woodworth@portofportland.com
03/25/11 09:47:00:669 -- (2312) Resolving 137.53.6.162 - twedge01.ohsu.edu
03/25/11 09:47:01:216 -- (2312) - SPF analysis for ohsu.edu done: - none
03/25/11 09:47:01:216 -- (2312) Mail from: mailto:prvs=40659F78CE=hinrichs@ohsu.edu - prvs=40659F78CE=hinrichs@ohsu.edu
03/25/11 09:47:01:388 -- (2312) - MAPS search done... 521 The IP 137.53.6.162 is Blacklisted by bl.spamcop.net. Blocked - see http://www.spamcop.net/bl.shtml?137.53.6.162 - http://www.spamcop.net/bl.shtml?137.53.6.162 --
03/25/11 09:47:01:388 -- (2312) 137.53.6.162 - Mail from: mailto:prvs=40659F78CE=hinrichs@ohsu.edu - prvs=40659F78CE=hinrichs@ohsu.edu To: mailto:Gail.Woodworth@portofportland.com - Gail.Woodworth@portofportland.com will be rejected
03/25/11 09:47:01:528 -- (2312) Start virus scan
03/25/11 09:47:01:560 -- (2312) Starting bayesian procedures
03/25/11 09:47:01:966 -- (2312) Blacklist cache - Added 137.53.6.162 to limbo
03/25/11 09:47:02:200 -- (2312) SFDB - Added 137.53.6.162 - Response: Error=0
03/25/11 09:47:02:200 -- (2312) Disconnect
 
However....that address is whitelisted on this line of the whitelist file:
 
mailto:hinrichs@ohsu.edu|gail.woodworth@portofportland.com - hinrichs@ohsu.edu|gail.woodworth@portofportland.com
 
so why was it blocked?
 
 
 


Replies:
Posted By: LogSat
Date Posted: 31 March 2011 at 9:17pm
Terry,

The sender in the email above is " mailto:prvs=40659F78CE=hinrichs@ohsu.edu - mailto:prvs=40659F78CE=hinrichs@ohsu.edu - hinrichs@ohsu.edu ", so the entry in the AutoWhiteListForcedDelivery.txt file you reference:
mailto:hinrichs@ohsu.edu|gail.woodworth@portofportland.com - hinrichs@ohsu.edu|gail.woodworth@portofportland.com
does not apply.
Please note that that file does support wildcards, so if you wish, you could modify it as follows:

* mailto:hinrichs@ohsu.edu|gail.woodworth@portofportland.com - hinrichs@ohsu.edu|gail.woodworth@portofportland.com

to whitelist all emails where the sender is something like prefix-bla-bla-hinrichs@ohsu.edu.



-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window