I got a spam that scored 100 for this:
* 100 USER_IN_BLACKLIST From: address is in the user's black-list
But I don't have any blacklist to my knowledge. I do site-wide filtering, and the mail was for me. Explanations? Tnx - John
Clearly that's the result of a blacklist_from entry, nothing automated like the AWL.
Check all the locations where blacklist entries might be:
grep blacklist /usr/share/spamassassin/*.cf grep blacklist /etc/mail/spamassassin/*.cf grep blacklist ~/.spamassassin/user_prefs
(note: your paths might differ slightly, check the first few lines of spamassassin -D --lint to check what paths it's reading)