Search in C:\ProgramData\Microsoft\Crypto\RSA\ and all subfolders for the folowwing files:
2. f686aace6942fb7f7ceb231212eef4a4_018e9184-1f67-46e7-b4c1-c3539d31c630Make sure that the user under which the Exchange Server Toolbox service is running has full access on these files.
In general adding whitelist entries in SpamAssassin can be done by creating a custom SpamAssassin cf
For whitelisting a single address you may use one of the following syntax
to whitelist all senders from a single domain.
We recommend to create a new cf-file at C:\ProgramData\JAM Software\spamdService\sa-config
and name it e.g. xWhitelist.cf. That way your custom whitelist will be parsed quite late during startup, thus preventing that any of your settings gets overridden by another config file. Please note that you
have to manually restart SpamAssassin Daemon control service to apply your changes.
Yes, the SpamAssassin used checks SPF records. The default settings for SPF can be found in 25_SPF.cf or the corresponding scores in 50_scores.cf. If you are using "Exchange Server Toolbox" the best way to set your own scores is to use the built-in editor for creating custom SpamAssassin config files which you can find under Spam Options.
For more information about the options, see:
Alternatively, you can manually create your own .cf file in which you define your "rules", this should only come last alphabetically, since SpamAssassin will evaluate the cf files in numerical-alphabetical order. (For example XMySettings.cf).