It may be me being thick but I still don't quite understand why the call to
spamassassin with the -add-to-blacklist doesn't record the ip address? It seems
to just wipeout any existing entries (and the same the other way around).
e.g.
check_whitelist returns
6.0 (6.0/3) -- [EMAIL PROTECTED]|ip=66.28
52.5 (52.5/2) -- [EMAIL PROTECTED]|ip=63.87
If I blacklist this entry using spamassassing
cat message | spamassassin -add-to-blacklist
then check_whitelist returns
100.0 (100.0/1) -- [EMAIL PROTECTED]|ip=none
all previous ip address information has been lost
also when the next message comes in from the above two address its marked back
down to 6.0 again, in effect negating the blacklisting.
Thanks
Jason Crummack
Easysoft Limited
> Good afternoon, Jason,
>
> On Wed, 6 Aug 2003, Jason Crummack wrote:
>
> > Could anyone sched any light on the following, i'm currently calling
> > spamassassin with the auto whitelist feature enabled and then manually
> sorting
> > spam to be passed into a call to spamassassin with a --add-to-blacklist
> > argument, the problem seems to be that the originating ip address isn't
> stored,
> >
> > check_whitelist returns
> >
> > 100.0 (100.0/1) -- [EMAIL PROTECTED]|ip=none
> >
> > yet the next email in from that address ends up marked as follows
> >
> > 52.5 (52.5/2) -- [EMAIL PROTECTED]|ip=63.87
>
> My best understanding is that that email/ip address combination
> was already in your whitelist before you added the blacklist entry. The
> whitelist is trying to moderate the blacklist entry a bit. As you get
> more and more of these, the effect of the whitelist entry will diminish.
> Cheers,
> - Bill
>
> ---------------------------------------------------------------------------
> "The only secure computer is one that's unplugged, locked in a
> safe, and buried 20 feet under the ground in a secret location... and
> i'm not even too sure about that one."
> -- Dennis Huges, FBI.
> (Courtesy of Tony Hoyle <[EMAIL PROTECTED]>)
> --------------------------------------------------------------------------
> William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, freedups, p0f,
> rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org
> Linux articles at: http://www.opensourcedigest.com
> --------------------------------------------------------------------------
>
>
>
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
