At 12:15 PM 6/23/03 +1200, Simon Byrnand wrote:At 00:41 23/06/03 +0200, Bernd Kuhls wrote:Hi,
got this nice baby:
Greetings, Bernd
[snip]
Just wondering, how exactly does posting a copy of that message to this list help anyone ?
a) There is no indication of what version of SpamAssassin processed the message, its not even obvious that it is even SpamAssassin
It's in the subject line, 2.55
Ack. Call me blind :/ (Or tired)
b) There is no X-Spam-Status header, so we can't see what tests triggered and what didn't
True, this is a bit omission.
c) The score of -80.6 suggests that it triggered the USER_IN_WHITELIST rule which has a score of -100, but because of a lack of further information its impossible to know...
Agreed, it almost certianly is.. it looks like a forged from: [EMAIL PROTECTED] that managed to get by the rcvd checks too.
Really, IMO, whack that line right outa 60_whitelist.cf, or even better yet, use an unwhitelist type command in local.cf.
I've suggested before on the list that predefined whitelists for places like amazon.com should be much less than -100, just -10, or perhaps even -5. Enough to offset any "spamminess" that might otherwise bump them over over the threshold, but not so negative that people abusing that whitelist entry will be able to get away with their blatent spam.
So does anyone have any figures on what kind of scores messages from amazon.com and other pre-whitelisted domains have *without* their whitelisting entry ? Ideally, the negative score of the whitelist would be roughly the same but opposite as this, so for example if real amazon.com "newsletters" typically scored around 5 points, make their whitelist value -5. Surely they don't need the full -100 ?
Meanwhile Spammer X whose spam would normally score 20 but who abuses the amazon.com (or other) whitelist entry still gets a score of 15 and gets caught, instead of getting -80.
Last time I brought this idea up it was greeted with stoney silence.... :)
Regards, Simon
------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
