Ok, here is the head of one of these mails that were marked as spam although the address is in the whitelist of the receiver:
I think I know why the mail is marked as spam (one of the reasons should be the X-Originating-IP is on a blacklist) but this is not my point.
Received: from mail (LHLO xyz.de) (220.127.116.11) by xyz.de
with LMTP; Wed, 23 Feb 2011 17:04:13 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by xyz.de (Postfix) with ESMTP id 22D80C01570C4
for <firstname.lastname@example.org>; Wed, 23 Feb 2011 17:04:13 +0100 (CET)
X-Virus-Scanned: amavisd-new at xyz.de
X-Spam-Status: Yes, score=5.323 tagged_above=-10 required=5
tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=1, HTML_MESSAGE=0.001,
RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_PBL=0.905, RCVD_IN_PSBL=2.7,
RCVD_IN_XBL=0.375, RDNS_NONE=0.793] autolearn=no
Received: from xyz.de ([127.0.0.1])
by localhost (xyz.de [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 8D+OAnwLJl1O for <email@example.com>;
Wed, 23 Feb 2011 17:04:11 +0100 (CET)
Received: from xyz.de (mail [18.104.22.168])
by xyz.de (Postfix) with ESMTP id 547E0C0153F70
for <firstname.lastname@example.org>; Wed, 23 Feb 2011 17:04:11 +0100 (CET)
From: "sender" <email@example.com>
To: "'receiver'" <firstname.lastname@example.org>
References: <email@example.com> <70A1375A5C9A47C19381643D8CC6E4F7@NBRECEIVER>
Date: Wed, 23 Feb 2011 17:04:11 +0100 (CET)
X-Mailer: Microsoft Outlook 14.0
X-Mailer: Zimbra 6.0.10_GA_2692 (ZimbraConnectorForOutlook/6.0.6058.8)
This is a multipart message in MIME format.
I can't see something in this header that looks like the whitelist was checked.
Can anyone tell me what is written in the header when a message was whitelisted?
Oh, and another question by the way: The sender and the receiver are using the same mail-server. They both are conntected via zimbra outlook connector with this server. Besides the whitelist am I wrong or shouldn't be the "ALL_TRUSTED=-5" of my configuration also in the list of spam-tests above? Or is this test made with the "X-Originating-IP"?
P.S.: Sorry for my bad englisch - it's too early ;-)