Today two pieces of nasty x-rated spam came through the filters with negative
scores because the spammer spoofed the From address to be _my_ address (the
address part only; the "real name" is not mine, they don't have that
information).
Trying to figure out how these weren't tagged as Spam, I see
X-Spam-Status: No, hits=-6.3 required=2.3
tests=AWL,BIG_FONT,FROM_AND_TO_SAME_5,HTML_FONT_COLOR_RED,
HTTP_USERNAME_USED,LARGE_COLLECTION,SPAM_PHRASE_05_08,
WEB_BUGS
version=2.43
X-Spam-Level:
Lots of BIG clues there, but that AWL wipes them all away. Ouch. What's the
recommended way to address this? AWL is not a rule, per se, so I can't simply
reset the score.
At the very least, I don't ever want to auto-whitelist my "own" address;
that's too typical a Spam trick! I'll settle for disabling the test
completely.
Do I simply set auto_whitelist_factor 0? Does that turn off AWL checking?
Is there a "better" solution?
Please Cc: responses to me as well as the list; I get the digest! Thanks.
--
- Vicki
Vicki Brown ZZZ Journeyman Sourceror:
P.O. Box 1269 zz |\ _,,,---,,_ Scripts & Philtres
San Bruno, CA zz /,`.-'`' -. ;-;;,_ Perl, Unix, MacOS
94066 USA |,4- ) )-,_. ,\ ( `'-' http://philtres.com
mailto:[EMAIL PROTECTED] '---''(_/--' `-'\_) http://www.cfcl.com/vlb
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
