On 19 Oct 2017, at 17:59 (-0400), Alex wrote:
Hi,
On Thu, Oct 19, 2017 at 4:04 PM, Bill Cole
<sausers-20150...@billmail.scconsult.com> wrote:
On 19 Oct 2017, at 15:38 (-0400), Alex wrote:
Third day, third set of false-negatives (20 this time) whitelisted
through mailchimp
https://pastebin.com/6vkxNXxX
I had removed the mcsv.net but forgot mcdlv.net. It's still not
being
tagged properly without the whitelisting.
That one hit USER_IN_SPF_WHITELIST, so you're still whitelisting it.
Did you
restart amavisd after changing the rules?
As I mentioned just above the link in this message, yes, the domain
was whitelisted. I've since removed it from the whitelist, but the
email still is not tagged by spamassassin.
So, do you have an example of a message that didn't hit
USER_IN_SPF_WHITELIST? One you got AFTER removing your whitelisting
rule?
I ask because the sample message also shows a SHORTCIRCUIT hit, which is
probably due to your USER_IN_SPF_WHITELIST rule being short-circuited
but maybe due to something else. SHORTCIRCUIT does as it is documented
to do: if there are pending DNS queries for evil URLs in a message when
a short-circuited rule is hit, their answers are ignored.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Paying Work: https://linkedin.com/in/billcole
