On Tue, Jan 11, 2005 at 11:04:12PM -0500, Matt Kettler wrote: > Ollie, Something isn't adding up in a big way. Have you run spamassassin > --lint lately? Perhaps SA is getting heavily confused.
Indeed you are right about things not adding up. > > Is there any chance you could re-run the message through spamassassin -d so > we could see the debug output? > I ran spamassassin --lint and got no output, implying no problems with the rules. I then ran the message through sa with -D. SA parsed all the "froms" and boiled them down (correctly) to [EMAIL PROTECTED] It even noted the forged HELO, but still it gave the Whitelist_from 100 pt. credit. OK, I thought, since SA is probably working fine, it must be my whitelist. I temporarily culled all the whitelist_from's from local.cf and ran the message through spamassassin -D. Eureka! No whitelist credit, and the message was correctly identified as spam. After a much more thorough examination of my rules, I found the culprit: whitelist_from *cnet.com insted of whitelist_from [EMAIL PROTECTED] Zapped by a missing "@". Thanks everyone for your comments, especially Matt whose suggestions got me to a fix. Ollie > > > -- |---------------------------| | Ollie Acheson | | Morristown, NJ | |---------------------------|
