Note that whitelisting from 'root' is probably a bad idea:
593 eep:spam/raw> grep -i "^From: .*root" * | wc
19 56 841
weekly run output, however, is far safer:
595 eep:spam/raw> grep -i 'weekly run' * | wc
0 0 0
-Dave
On Sat, Mar 16, 2002 at 04:58:14PM -0600, Mike Loiterman mooed:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Your initial reccomendation worked after I restarting spamd. I never
> realized I had to restart it in order for changes to stick. I think
> that should be in the FAQ or in the docs somewhere. Thanks for all
> the help though.
>
> Mike Loiterman
> [EMAIL PROTECTED]
> PGP Key 0xD1B9D18E
>
> >-----Original Message-----
> >From: [EMAIL PROTECTED]
> >[mailto:spamassassin-talk- [EMAIL PROTECTED]] On Behalf Of
> >CertaintyTech - Ed Henderson Sent: Saturday, March 16, 2002 4:33 PM
> >To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> >Subject: RE: [SAtalk] Whitelist for Charlie Root
> >
> >Just realized that you did not try:
> >
> >whitelist_from root
> >
> >
> >Give it a try. If that doesn't work try this modification to the
> >custom rule:
> >header CHARLIE_ROOT From =~ /root/i
> >describe CHARLIE_ROOT From is Charlie Root
> >score CHARLIE_ROOT -100.0
> >
> >OR another:
> >
> >header CHARLIE_ROOT Subject =~ /weekly run output/i
> >describe CHARLIE_ROOT From is Charlie Root
> >score CHARLIE_ROOT -100.0
> >
> >BTW, after modifying local.cf you need to restart spamd daemon.
> >
> >> -----Original Message-----
> >> From: [EMAIL PROTECTED]
> >> [mailto:[EMAIL PROTECTED]]On Behalf Of
> >> Mike Loiterman
> >> Sent: Saturday, March 16, 2002 4:43 PM
> >> To: 'CertaintyTech - Ed Henderson';
> >> [EMAIL PROTECTED]
> >> Subject: RE: [SAtalk] Whitelist for Charlie Root
> >>
> >>
> >>
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA1
> >>
> >> Ugh...its still isn't working. I pasted in what you described
> >> into my /etc/mail/spamassassin/local.cf and it still is getting
> >> tagged as spam. This thing is unstoppable and its frustrating the
> >> heck out of me. Any other ideas?
> >>
> >> Mike Loiterman
> >> [EMAIL PROTECTED]
> >> PGP Key 0xD1B9D18E
> >>
> >> >-----Original Message-----
> >> >From: [EMAIL PROTECTED]
> >> >[mailto:spamassassin-talk- [EMAIL PROTECTED]] On Behalf
> >> >Of CertaintyTech - Ed Henderson Sent: Saturday, March 16, 2002
> >> >1:50 PM To: [EMAIL PROTECTED];
> >> >[EMAIL PROTECTED] Subject: RE: [SAtalk]
> >> >Whitelist for Charlie Root
> >> >
> >> >The whitelist_from won't work because the email addres is simply
> >> >"root" and doesn't include a domain name. Therefore, you must
> >> >create your own custom rule in /etc/mail/spamassassin/local.cf:
> >> >
> >> >header CHARLIE_ROOT From =~ /Charlie Root/i
> >> >describe CHARLIE_ROOT From is Charlie Root
> >> >score CHARLIE_ROOT -100.0
> >> >
> >> >
> >> >Now it will get thru.
> >> >
> >> >---
> >> >Ed.
> >> >
> >> >
> >> >
> >> >> -----Original Message-----
> >> >> From: Mike Loiterman [mailto:[EMAIL PROTECTED]]
> >> >> Sent: Saturday, March 16, 2002 2:03 PM
> >> >> To: 'CertaintyTech - Ed Henderson';
> >> >> [EMAIL PROTECTED]
> >> >> Subject: RE: [SAtalk] Whitelist for Charlie Root
> >> >>
> >> >>
> >> >>
> >> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> >> Hash: SHA1
> >> >>
> >> >> I have not been able to get any whitelist entries to work for
> >> >> this:
> >> >>
> >> >> From: Charlie Root <root>
> >> >> Sent: Saturday, March 16, 2002 4:25 AM
> >> >> To: root
> >> >> Subject: fat_man.ascendency.net weekly run output
> >> >>
> >> >>
> >> >> Cleaning up kernel database files:
> >> >> Rebuilding locate database:
> >> >>
> >> >> Rebuilding whatis database:
> >> >>
> >> >> I have tried:
> >> >> whitelist_from 'Charlie Root <root>'
> >> >> whitelist_from *Charlie Root*
> >> >> whitelist_from Charlie Root <root>
> >> >> whitelist_to root
> >> >> whitelist_to *root*
> >> >>
> >> >> Nothing seems to work. The problem, I think, is that someone
> >> >> submitted this to Razor:
> >> >>
> >> >> X-Spam-Report: 5.8 hits, 5 required;
> >> >> * 3.5 -- From: has a malformed address
> >> >> * -0.1 -- To: has a malformed address
> >> >> * 3.0 -- Listed in Razor, see http://razor.sourceforge.net/
> >> >> * 0.2 -- From and To the same address
> >> >> * -0.8 -- AWL: Auto-whitelist adjustment
> >> >>
> >> >> This is driving me nuts. Any help would be appreciated.
> >> >>
> >> >>
> >> >> Mike Loiterman
> >> >> [EMAIL PROTECTED]
> >> >> PGP Key 0xD1B9D18E
> >> >>
> >> >> >-----Original Message-----
> >> >> >From: [EMAIL PROTECTED]
> >> >> >[mailto:spamassassin-talk- [EMAIL PROTECTED]] On
> >> >> >Behalf Of CertaintyTech - Ed Henderson Sent: Friday, March 15,
> >> >> >2002 7:08 AM To: [EMAIL PROTECTED];
> >> >> >[EMAIL PROTECTED] Subject: RE: [SAtalk]
> >> >> >Whitelist for Charlie Root
> >> >> >
> >> >> >Add a whitelist_from entry in your
> >> >> >/etc/mail/spamassassin/local.cf or perhaps a custom rule that
> >> >> >looks for a unique Subject and scores the message with a -100.
> >> >> >See man page Mail::SpamAssassin::Conf for details.
> >> >> >
> >> >> >
> >> >> >==
> >> >> >Ed.
> >> >> >
> >> >> >> -----Original Message-----
> >> >> >> From: [EMAIL PROTECTED]
> >> >> >> [mailto:[EMAIL PROTECTED]]On
> >> >> >> Behalf Of Mike Loiterman
> >> >> >> Sent: Saturday, March 16, 2002 7:41 AM
> >> >> >> To: [EMAIL PROTECTED]
> >> >> >> Subject: [SAtalk] Whitelist for Charlie Root
> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> >> >> Hash: SHA1
> >> >> >>
> >> >> >> My weekly reports from my server are getting tagged as SPAM.
> >> >> >> How can I effectively whitelist this without opening up a
> >> >> >> hole in my defenses..??
> >> >> >>
> >> >> >>
> >> >> >> From: Charlie Root <root>
> >> >> >> Sent: Saturday, March 16, 2002 4:25 AM
> >> >> >> To: root
> >> >> >> Subject: fat_man.ascendency.net weekly run output
> >> >> >>
> >> >> >>
> >> >> >> Cleaning up kernel database files:
> >> >> >>
> >> >> >> Rebuilding locate database:
> >> >> >>
> >> >> >> Rebuilding whatis database:
> >> >> >>
> >> >> >>
> >> >> >> Mike Loiterman
> >> >> >> [EMAIL PROTECTED]
> >> >> >> PGP Key 0xD1B9D18E
> >> >> >>
> >> >> >>
> >> >> >> -----BEGIN PGP SIGNATURE-----
> >> >> >> Version: PGP 7.0.4
> >> >> >> Comment: Message digitally signed by Mike Loiterman
> >> >> >>
> >> >> >>
> >> >>
> >>
> >>>iQA/AwUBPJM9ZWjZbUnRudGOEQJNLACg4bjbwKC/t3aQyZC0h2N1BQVtXBUAoN
> >p
> >> >h
> >> >> >> h+0dDLkuqmzRjuBYkgg5Hej3
> >> >> >> =G7rb
> >> >> >> -----END PGP SIGNATURE-----
> >> >> >>
> >> >> >>
> >> >> >> _______________________________________________
> >> >> >> Spamassassin-talk mailing list
> >> >> >> [EMAIL PROTECTED]
> >> >> >> https://lists.sourceforge.net/lists/listinfo/spamassassin-tal
> >> >> >> k
> >> >> >>
> >> >> >
> >> >> >
> >> >> >_______________________________________________
> >> >> >Spamassassin-talk mailing list
> >> >> >[EMAIL PROTECTED]
> >> >> >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> >> >>
> >> >> -----BEGIN PGP SIGNATURE-----
> >> >> Version: PGP 7.0.4
> >> >> Comment: Message digitally signed by Mike Loiterman
> >> >>
> >> >>
> >iQA/AwUBPJOWx2jZbUnRudGOEQKI6ACgsv2k0h7NStZpiivaa6eCwxVxuxAAnAg7
> >> >> PGWlntcB1RIKeFZfI3yUseRI
> >> >> =01FB
> >> >> -----END PGP SIGNATURE-----
> >> >>
> >> >>
> >> >
> >> >
> >> >_______________________________________________
> >> >Spamassassin-talk mailing list
> >> >[EMAIL PROTECTED]
> >> >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> >>
> >> -----BEGIN PGP SIGNATURE-----
> >> Version: PGP 7.0.4
> >> Comment: Message digitally signed by Mike Loiterman
> >>
> >> iQA/AwUBPJO8bGjZbUnRudGOEQLxegCeM9QM4BGfOYvzlBw/zlYj4rLmyioAni6P
> >> 1goP8lkDOgXHcIzwKJ/9It7Z
> >> =W7SU
> >> -----END PGP SIGNATURE-----
> >>
> >>
> >> _______________________________________________
> >> Spamassassin-talk mailing list
> >> [EMAIL PROTECTED]
> >> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> >>
> >
> >
> >_______________________________________________
> >Spamassassin-talk mailing list
> >[EMAIL PROTECTED]
> >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 7.0.4
> Comment: Message digitally signed by Mike Loiterman
>
> iQA/AwUBPJPOBWjZbUnRudGOEQIf9gCfbgB6OWhQsi5rGe6gyNQL3nIeYeoAoJPq
> nCvvkZ65tiXBqCwIlFKOWug+
> =dbmF
> -----END PGP SIGNATURE-----
>
>
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
--
work: [EMAIL PROTECTED] me: [EMAIL PROTECTED]
MIT Laboratory for Computer Science http://www.angio.net/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
