Hi,
Ok, here is the head of one of these mails that were marked as spam although the address is in the whitelist of the receiver:
Code:
Return-Path: sender@company-domain.de
Received: from mail (LHLO xyz.de) (11.22.33.44) by xyz.de
with LMTP; Wed, 23 Feb 2011 17:04:13 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by xyz.de (Postfix) with ESMTP id 22D80C01570C4
for <receiver@company-domain.de>; Wed, 23 Feb 2011 17:04:13 +0100 (CET)
X-Virus-Scanned: amavisd-new at xyz.de
X-Spam-Flag: YES
X-Spam-Score: 5.323
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.323 tagged_above=-10 required=5
tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=1, HTML_MESSAGE=0.001,
RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_PBL=0.905, RCVD_IN_PSBL=2.7,
RCVD_IN_XBL=0.375, RDNS_NONE=0.793] autolearn=no
Received: from xyz.de ([127.0.0.1])
by localhost (xyz.de [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 8D+OAnwLJl1O for <receiver@company-domain.de>;
Wed, 23 Feb 2011 17:04:11 +0100 (CET)
Received: from xyz.de (mail [11.22.33.44])
by xyz.de (Postfix) with ESMTP id 547E0C0153F70
for <receiver@company-domain.de>; Wed, 23 Feb 2011 17:04:11 +0100 (CET)
From: "sender" <sender@company-domain.de>
To: "'receiver'" <receiver@company-domain.de>
References: <001f01cbd35f$b2797810$176c6830$@company-domain.de> <70A1375A5C9A47C19381643D8CC6E4F7@NBRECEIVER>
In-Reply-To: <70A1375A5C9A47C19381643D8CC6E4F7@NBRECEIVER>
Subject: =?iso-8859-1?Q?AW:_Meeting_in_M=FCnchen?=
Date: Wed, 23 Feb 2011 17:04:11 +0100 (CET)
Message-ID: <001e01cbd373$4c7fe120$e57fa360$@company-domain.de>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_001F_01CBD37B.AE490410"
X-Mailer: Microsoft Outlook 14.0
X-Mailer: Zimbra 6.0.10_GA_2692 (ZimbraConnectorForOutlook/6.0.6058.8)
Thread-Index: AQIc1f+RfqCmXnEDxlEm+78ACu0j1wLD7858k1cakQA=
Content-Language: de
X-Originating-IP: [44.33.22.11]
This is a multipart message in MIME format.
------=_NextPart_000_001F_01CBD37B.AE490410
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
I think I know why the mail is marked as spam (one of the reasons should be the X-Originating-IP is on a blacklist) but this is not my point.
I can't see something in this header that looks like the whitelist was checked.
Can anyone tell me what is written in the header when a message was whitelisted?
Oh, and another question by the way: The sender and the receiver are using the same mail-server. They both are conntected via zimbra outlook connector with this server. Besides the whitelist am I wrong or shouldn't be the "ALL_TRUSTED=-5" of my configuration also in the list of spam-tests above? Or is this test made with the "X-Originating-IP"?
Greets,
Steffen
P.S.: Sorry for my bad englisch - it's too early ;-)