mkettler at evi-inc.com
Wed Nov 22 18:41:55 GMT 2006
Christian Campbell wrote:
> A SA rule - AWL - seems to be subtracting score, and effectively marking
> my spam as ham. I've found that it's a Auto-whitelist rule, but I'm
> unsure as to why it's being triggered. Here's an example header. It's
> the typical debora stock spam...
The AWL is a history-tracking score averager. In this case, SA had seen mail
from this sender before that was very low scoring. When a high-scoring message
came in, it used the AWL to reduce the score to be halfway between the current
score and the past average.
Also, I personally suggest disabling the AWL on production systems. The AWL does
not currently support expiry, so the database will grow without bound. While
it's a neat feature, it's really not yet ready for prime-time on servers of more
than modest mail volume.
Disabling it depends a bit on version, but assuming SA 3.1.x it should be a
plugin you can disable in v310.pre simply comment out the following line:
More information about the MailScanner