User Tools

Site Tools


how_to:whitelist_blacklist

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
Next revisionBoth sides next revision
how_to:whitelist_blacklist [2010/04/30 15:52] – created paulhow_to:whitelist_blacklist [2013/01/11 08:53] – [Spamfilter Whitelist & Blacklist] paul
Line 1: Line 1:
 ======Spamfilter Whitelist & Blacklist====== ======Spamfilter Whitelist & Blacklist======
  
-The VPOP3 spamfilter has a whitelist and a blacklist.+The VPOP3 spamfilter has a whitelist and a blacklist for sender addresses. It also has a whitelist and blacklist for words/phrases.
  
 By default, whenever you send a message, the recipient's address will be added to the whitelist, this is because VPOP3 will assume that the recipient is someone you want to be in contact with. Similarly, if you release a message from the spamfilter quarantine, the sender's address will be added to the whitelist. By default, whenever you send a message, the recipient's address will be added to the whitelist, this is because VPOP3 will assume that the recipient is someone you want to be in contact with. Similarly, if you release a message from the spamfilter quarantine, the sender's address will be added to the whitelist.
 +
 +====What the whitelist and blacklist do====
 +When an address is found on the whitelist or blacklist, then the spam score is adjusted by 100 x (the relevant [[reference:spamfilter_rule_weights|rule weight]]. With the default settings, this means that an entry on the whitelist has '-10000' added to it, and an entry on the blacklist has '10000' added to it. So, if an entry is in the whitelist AND the blacklist, they will cancel each other out. 
 +
 +If you wish, you could adjust the rule weights so that one has precedence over the other, eg set the whitelist weight to '-150' to make the whitelist overrule the blacklist, or the blacklist weight to '150' to make the blacklist overrule the whitelist.
 +
  
 =====Blacklist===== =====Blacklist=====
Line 10: Line 16:
 Because of this it is often not worthwhile putting addresses onto the Blacklist manually either. The only case that is generally useful is if you have signed up to a mailing list, and they are refusing to remove you from the list, but this is quite rare. Because of this it is often not worthwhile putting addresses onto the Blacklist manually either. The only case that is generally useful is if you have signed up to a mailing list, and they are refusing to remove you from the list, but this is quite rare.
  
-=====Local Addresses===== +====Fields which the Blacklist checks==== 
-If you put an address on the whitelist which is also in a 'local domain', then, by default VPOP3 will ignore that. This is because spammers often send spam pretending to be from the same domain as the recipient. +The Blacklist currently checks the addresses in the **Return-Path**, **Reply-To** and **From** header fields. 
 + 
 +The Blacklist will not be checked if the header contains three or more 'Reply-To' headers (this is an invalid message, and matches another spamfilter rule) 
 +=====Whitelist===== 
 +====Local Addresses==== 
 +If you put an address on the whitelist which is also in a 'local domain', then, by default VPOP3 will ignore that when checking //incoming// mail. This is because spammers often send spam pretending to be from the same domain as the recipient. In most cases, mail from local domains will be sent locally, not incoming, so, usually, this is a sensible rule to follow. 
 + 
 +If you want to tell VPOP3 to check the whitelist for incoming mail from local domain email addresses as well, then go to **Settings -> Spamfilter -> General**, go to the **Script Configuration** tab, and set **CheckLocalWhitelist** to **1**. 
 + 
 +Note that in many cases, [[allowing_mail_relay_through_vpop3|external users can actually send mail through VPOP3]] as if they were local users, so their mail won't be spam filtered at all.  
 + 
 +====Fields which the Whitelist checks==== 
 +The Whitelist currently checks the addresses in the **Reply-To** and **From** header fields.
  
-If you want to tell VPOP3 to check the whitelist for local domain email addresses as well, then go to **Settings -> Spamfilter -> General**, go to the **Script Configuration** tab, and set **CheckLocalWhitelist** to **1**.+The Whitelist will not be checked if the header contains three or more 'Reply-To' headers (this is an invalid message, and matches another spamfilter rule)
  
 +The 'Reply-To' address will not be checked if it is set to 'noreply@facebookmail.com', as that would whitelist a lot of spam, because that address is often added to the whitelist by out-of-office replies.
  
 +====Whitelist result info====
 +The spam filter adds a header to the message called 'X-VPOP3-WL' which contains diagnostic information about the whitelist results. It may also add a line 'X-VPOP3-SpamWL' if the whitelist checks have been skipped for some reason.
how_to/whitelist_blacklist.txt · Last modified: 2018/11/14 10:45 by 127.0.0.1