Matt (or group), I have read this and I believe I understand the scoring (as well as I understand anything in SA!), but I don't believe that this particular "From" address has ever sent any HAM, so I am wondering why he didn't get a positive AWL score. Is it because this particular message wasn't AS spammy as the previous ones? (on a side note: Does running mime messages through SA with the -t switch affect the AWL averages? If so, I'm screwing them up on a regular basis.)
FWIW here is the AWL section of the debug run of this message: debug: Tie-ing to DB file R/W in C:\Documents and Settings\Administrator.000/.spamassassin/auto-whitelist debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=81.198 scores 2/7.772 debug: AWL active, pre-score: 4.5, autolearn score: 4.5, mean: 3.886, IP: 81.198.139.179 debug: add_score: New count: 3, new totscore: 12.272 debug: DB addr list: untie-ing and unlocking. debug: DB addr list: file locked, breaking lock. debug: unlock: 2252 unlink C:\Documents and Settings\Administrator.000/.spamassassin/auto-whitelist.lock debug: Post AWL score: 4.193 Thanks for any advise you can offer, Clay >>> Matt Kettler <[EMAIL PROTECTED]> 12/14/2005 1:36:38 pm >>> Clay Davis wrote: > When rule "AWL" fires, how do I know which entry set it off? I would like to > consider removing this entry from my White-list, but don't know which one. The AWL doesn't fire off based on any white-list entries in your config files. The AWL isn't really even a whitelist, but it's either on, or off. Before disabling the AWL, read up about what it really is, what it really does, and why assigning negative points to spam and positive points to nonspam is perfectly normal for the awl. I'd suggest these two wiki articles: http://wiki.apache.org/spamassassin/AwlWrongWay http://wiki.apache.org/spamassassin/AutoWhitelist