auto whitelisting

[Matt Kettler]

Green, Rodney wrote:
> Hello,
> 
> Is it recommended to disable auto whitelisting in spam.assassin.prefs.conf?

Largely a matter of personal preference.

That said, my personal opinion is that SA's AWL is not ready for production use
on a mailserver that serves more than 10 people. The SA devs would argue
otherwise, and they do use it on their production boxes.

I base my opinion on the lack of automatic database maintenance. There is no
auto-expire for AWL entries. Even if you use the "check-whitelist --clean"
script, this only removes entries based on the number of times a particular
address has been seen. It will not remove an address that was used 100 times,
then became inactive 2 years ago..

So, until the AWL gets a real atime-based auto-expire system like the bayes
system has, I will refrain from using it on a production box.

Of course, I'd suggest you develop your own opinion, as the requirements of your
system may be quite different from mine.