Can't figure out why we are getting so much spam.

[UxBoD]

Jason,

I do believe something in your ruleset is triggering the W/L.

Could you test by moving the whitelist ruleset out of the way ? Perhaps save one of those messages and run it manually through SA in debug mode.

May I ask why there are so many entries in your whitelist ?  IIRC you have the SA score set to 3.  Why not just increase that and drop some of the W/L entries. IMHO.

Regards,

--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854  36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.