I've read thru the mailing list for issues related to bad AWL scores, but I don't see anything about this:
I'm confused whether AWL works by hard IP, DNS name from Received:, reverse lookup, email from: line, .... How the heck do you dump the AWL database to even tell what it's doing? My problem seems to be that the spammer is forging my domain and email address, which triggers AWL (example follows, with "@" replaced). I can't see any reason the spammer's hard IP (211.21.93.134) would be in my AWL. "dewey" doesn't appear in "strings auto-whitelist". "ip=211.21" does appear in "strings", but the rest of the line has no obvious relation to this spam. Offending email: X-Original-To: ervan [at] kelvinist.com Delivered-To: ervan [at] kelvinist.com Received: from kelvinist.com (unknown [211.21.93.134]) by kelvinist.com (Postfix) with ESMTP id 6B1DF41BA for <ervan [at] kelvinist.com>; Mon, 20 Oct 2003 23:51:24 -0700 (PDT) Received: from 775-HERMES [192.168.0.97] by kelvinist.com with eSMTP; Tue, 21 Oct 2003 14:54:45 +0800 Message-ID: <[EMAIL PROTECTED]> From: "dewey" <ervan [at] kelvinist.com> To: <ervan [at] kelvinist.com> Subject: Corne as much as a pr0n star with these pills! Date: Tue, 21 Oct 2003 14:54:45 +0800 MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" X-Priority: 3 X-Mailer: mailer ABC-Tracking: <ZXJ2YW5Aa2VsdmluaXN0LmNvbQ==> X-Spam-Checker-Version: SpamAssassin 2.60-rc5 (1.205-2003-09-16-exp) on www.kelvinist.com X-Spam-Level: * X-Spam-Status: No, hits=1.3 required=5.1 tests=AWL,[...] X-Spam-Report: [....] * -6.2 AWL AWL: Auto-whitelist adjustment ============================================== Ervan Darnell [EMAIL PROTECTED] ------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
