Unlless the dnswl caused some sort of missfire??<div><br></div><div>Martin<span></span><br><br>On Monday, 16 April 2012, Timothy J. Barhorst wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Hello,<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Currently using MailScanner-4.84.5-2 on Centos 5 with SpamAssassin 3.3.1<u></u><u></u></span></p><p class="MsoNormal">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">One of our users received an email from <a href="http://delta.com" target="_blank">delta.com</a> and it had the USER_IN_WHITELIST value shown below.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">What is triggering this? Is there something in SpamAssassin that should be tweaked?<u></u><u></u></span></p><p class="MsoNormal">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Delta.com was NOT in spam.whitelist.rules.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><u></u> <u></u></span></p><table border="0" cellpadding="0" width="100%" style="width:100.0%"><tbody><tr><td style="padding:.75pt .75pt .75pt .75pt">
</td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">score=-105.81<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal"> <u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">4.3<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">required<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal"> <u></u><u></u></p>
</td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">spam<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">autolearn=not<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"> <u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">-1.90<u></u><u></u></p></td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">
BAYES_00<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">Bayesian spam probability is 0 to 1%<u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">
0.00<u></u><u></u></p></td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">HTML_MESSAGE<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">HTML included in message<u></u><u></u></p>
</td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">0.38<u></u><u></u></p></td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">HTML_MIME_NO_HTML_TAG<u></u><u></u></p>
</td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">HTML-only message, but there is no HTML tag<u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">0.72<u></u><u></u></p>
</td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">MIME_HTML_ONLY<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">Message only has text/html MIME parts<u></u><u></u></p>
</td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">-5.00<u></u><u></u></p></td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">RCVD_IN_DNSWL_HI<u></u><u></u></p>
</td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">Sender listed at <a href="http://www.dnswl.org/" target="_blank">http://www.dnswl.org/</a>, high trust<u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">-0.00<u></u><u></u></p></td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">SPF_PASS<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">
SPF: sender matches SPF record<u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">-0.01<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">T_RP_MATCHES_RCVD<u></u><u></u></p>
</td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal"> <u></u><u></u></p></td></tr><tr><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">-100.00<u></u><u></u></p></td><td width="225" style="width:168.75pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">USER_IN_WHITELIST<u></u><u></u></p></td><td style="padding:.75pt .75pt .75pt .75pt"><p class="MsoNormal">From: address is in the user's white-list<u></u><u></u></p></td></tr></tbody></table><p class="MsoNormal">
<span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><u></u> <u></u></span></p></div></div></blockquote></div><br><br>-- <br>-- <br>Martin Hepworth<br>Oxford, UK<br>