whitelisted? But where???
Matt Kettler
mkettler at evi-inc.com
Tue Nov 21 18:27:29 GMT 2006
DAve wrote:
>
> If you run the message through SpamAssassin alone does it still get
> whitelisted?
>
No, you can tell that just by looking at the header. This was DEFINITELY
whitelisted by MailScanner, not SA.
SA's whitelists will all show up as a rule hit (ie: USER_IN_WHITELIST or
USER_IN_WHITELIST_TO). It would also cause a score adjustment, resulting in the
score being low.
X-TireSwing-Spam: not spam (whitelisted), SpamAssassin (not cached,
score=29.493, required 5, autolearn=spam, BAYES_50 0.00,
FROM_LOCAL_NOVOWEL 2.86, HELO_DYNAMIC_HCC 4.10,
HELO_DYNAMIC_IPADDR2 3.82, HELO_DYNAMIC_SPLIT_IP 2.19,
HTML_50_60 0.13, HTML_MESSAGE 0.00, RAZOR2_CF_RANGE_51_100 0.50,
RAZOR2_CF_RANGE_E4_51_100 1.50, RAZOR2_CF_RANGE_E8_51_100 1.50,
RAZOR2_CHECK 0.50, RCVD_FORGED_WROTE 2.80, RCVD_NUMERIC_HELO 1.50,
SPAMMY_XMAILER 1.00, URIBL_BLACK 3.00, URIBL_JP_SURBL 4.09)
There's no SA whitelist in that list of rule hits, and the score is high. This
is purely a MailScanner.conf level issue.
More information about the MailScanner
mailing list