Too many false whitelist

[Steve Freegard]

Hi Mark,

Mark Farmer wrote:
> Hi all
> 
> My first post here. Sorry if this been discussed before but i've been
> searching and not getting the answer I need.
> 
> I have MailScanner installed & running. I'm monitoring things in
> Mailwatch and seeing a lot of spam being marked as whitelisted.
> I have compiled a fairly short whitelist of my own but non of the
> addresses in there match the ones getting through.
> Does Spamassassin have a whitelist of it's own? I have been looking for
> it with the idea of deleting it, but have not found it.

MailWatch does indeed show anything whitelisted in SpamAssassin as being 
whitelisted overall.

Look at the SpamAssassin Report and see if the USER_IN_WHITELIST or 
USER_IN_DEF_WHITELIST rules are firing; if they are - you are probably 
using the SARE_WHITELIST ruleset enabled via rules_du_jour or sa-update 
so you'll probably have to remove it from these utilities and delete the 
rulesets from /etc/mail/spamassassin, the names of the rulesets are 
70_sare_whitelist_rcvd.cf and 70_sare_whitelist_spf.cf.

Kind regards,
Steve.

--
Steve Freegard
Development Director
Fort Systems Ltd.