On 2022-12-19 at 21:43:08 UTC-0500 (Mon, 19 Dec 2022 21:43:08 -0500)
Joey J <jacklistm...@gmail.com>
is rumored to have said:

Thanks,
So welcomelist_from_rcvd j...@company.com [1.2.3.4]
Is saying if it's received from j...@company.com and the IP combination?
And then simply score it
 welcomelist_from_rcvd score -2
I will try that thank you!

No, there is no score line for a 'welcomelist_from_rcvd' directive.

The syntax for all of the welcomelist/blocklist directives is documented in Mail::SpamAssassin::Conf. You can see that with:

 perldoc Mail::SpamAssassin::Conf

In previous versions, these directives all used 'whitelist' and 'blacklist' so if you are not running 3.4.6 or 4.0.0 those names will be in the docs.

The scores for the various wl/bl settings are controlled by a set of rules distributed and described in rules/60_welcomelist.cf. As Greg indicated, welcomelist_from_rcvd causes a hit on USER_IN_WELCOMELIST, which has a default score of -100. You can change that locally in your local.cf file, but it will change for ALL addresses you've used with welcomelist_from_rcvd or (not recommended) welcomelist_from. You can also use def_welcomelist_from_rcvd, which is used for the addresses in the "default" welcomelist which is part of the rules distribution. That is scored via USER_IN_DEF_WELCOMELIST, set at -15 in the distribution.

A better tool for this would be welcomelist_from_auth, which you can use if the sender's SPF authorizes the IP you see the mail from or if their mail is signed with DKIM.

The BEST solution would be to figure out specifically why the mail is sometimes being tagged as spam, and fix that.



On Mon, Dec 19, 2022 at 8:39 PM Greg Troxel <g...@lexort.com> wrote:


Joey J <jacklistm...@gmail.com> writes:

I'm trying to see if there is a "best way" to provide negative scoring
for
a certain persons email.

That's easy.  There are many ways, but not best way.

As an example if j...@company.com is communicating with paypal or other
real
banking institutions, then at times within the email chain, SA will tag
it
as spam.

It's really not clear what your issue is.

I want to see if there is if email is from j...@company.com AND is from
IP
address 1.2.3.4, then lets take away 2 from the score, hopefully allowing
those legitimate types of messages through.
I couldn't find an example on how to accomplish this dual criteria check.
Any assistance is apreciated.

welcomelist_from_rcvd   j...@company.com         [1.2.3.4]

should work, but -100. It would be nice if welcomelist_* could take a
score, but it you are sure you want *your* SA to not mark it as spam,
-100 is the way to spell that.



--
Thanks!
Joey


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Reply via email to