check for another instance of user_prefs somewhere on your system. looks like your own email is the from. some spammers like to put your email as the from so it will fool spam assassin's default setup.
Alan Fullmer Owner / Administrator [EMAIL PROTECTED] Xnote Communications www.xnote.com ----- Original Message ----- From: "Peter Horst" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 28, 2003 9:19 PM Subject: [SAtalk] USER_IN_WHITELIST > I've just started using spamd recently. I got a spam in my inbox that > spamd marked as follows: > > ---------------------------------------- > > [snip] > List-Id: <security-basics.list-id.securityfocus.com> > [snip] > From: "Mark McManus" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Subject: NetTracker is the most flexible of any Web analytics tools on the market > [snip] > X-Spam-Status: No, hits=-100.9 required=5.0 > tests=KNOWN_MAILING_LIST,USER_IN_WHITELIST > version=2.55 > X-Spam-Level: > X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) > X-Spam-Report: This mail is probably spam. The original message has been attached > along with this report, so you can recognize or block similar unwanted > mail in future. See http://spamassassin.org/tag/ for more details. > Content preview: Hello, This email will be an introduction to > NetTracker, the most flexible analytics tool out there. We are able to > track everything. Websites, Intranets, Extranets, Firewalls, Proxy and > Streaming Media all can be tracked with NetTracker. [...] > Content analysis details: (-100.90 points, 5 required) > USER_IN_WHITELIST (-100.0 points)From: address is in the user's white-list > KNOWN_MAILING_LIST (-0.9 points) Email came from some known mailing list software > > ---------------------------------------- > > What does USER_IN_WHITELIST mean? I don't have any whitelists set up at > all. I couldn't find anything in the Conf manpage or FAQ about this -- > if it helps, here's my /etc/mail/spamassassin/local.cf: > > ok_languages en > ok_locales en > > always_add_report 1 > > use_pyzor 0 > use_razor1 0 > use_razor2 0 > use_bayes 0 > use_dcc 0 > > skip_rbl_checks 1 > auto_learn 0 > > How can I get this to behave? > > Thanks. > > Peter > > -- > Using encryption on the Internet is the equivalent of arranging an armored > car to deliver credit-card information from someone living in a cardboard > box to someone living on a park bench. > -- Gene Spafford > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
