auto whitelisting

[Martin Hepworth]

Matt Kettler wrote:
> Green, Rodney wrote:
>> Hello,
>>
>> Is it recommended to disable auto whitelisting in spam.assassin.prefs.conf?
> 
> Largely a matter of personal preference.
> 
> That said, my personal opinion is that SA's AWL is not ready for production use
> on a mailserver that serves more than 10 people. The SA devs would argue
> otherwise, and they do use it on their production boxes.
> 
> I base my opinion on the lack of automatic database maintenance. There is no
> auto-expire for AWL entries. Even if you use the "check-whitelist --clean"
> script, this only removes entries based on the number of times a particular
> address has been seen. It will not remove an address that was used 100 times,
> then became inactive 2 years ago..
> 
> So, until the AWL gets a real atime-based auto-expire system like the bayes
> system has, I will refrain from using it on a production box.
> 
> Of course, I'd suggest you develop your own opinion, as the requirements of your
> system may be quite different from mine.

I'd agree with Matt. I always recommend you turn the thing off as it 
tends to let spam through when you don't want it to..

-- 
Martin Hepworth
Senior Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************