Beginner wrote: > Hi, > > === SyS Stuff ======== > SpamAssassin version 3.0.3 > running on Perl version 5.8.4 > > Exim 4.2, on Debian 3.1, sitewide config. > I hope that 3.0.3 version is the one that Debian patched to fix the two security holes that exist in the original 3.0.3. (AFAIK Debian did backport the fixes, and made a 3.0.3-x release)
See: http://wiki.apache.org/spamassassin/Security > /usr/sbin/spamd --nouser-config --max-children 6 --helper-home- > dir=/var/spool/spamassassin/ --username=nobody -d -- > pidfile=/usr/local/run/spamd.pid > > ==================== > > I have recently have a increase in false positives, mostly as a > result of rbl checks. I have been relying on whitelist to ensure mail > from some addresses gets through but I can not confirm that it is > working. It actually looks like it isn't using the whitelist at all. > > If I run `spamassassin -D < test.eml` there is no reference in the > output to the whitelist file. > > If I run spamassasin -D --lint is does refer to the whitelist file: > > debug: lock: 18407 created /usr/local/spl-mail/conf/auto- > whitelist.lock.myserver.mydomain.com.18407 > debug: lock: 18407 trying to get lock on /usr/local/my-mail/conf/auto- > whitelist with 0 retries > debug: lock: 18407 link to /usr/local/my-mail/conf/auto- > whitelist.lock: link ok > debug: Tie-ing to DB file R/W in /usr/local/my-mail/conf/auto- > whitelist > > However addresses that are added to the whitelist do not seem to be > getting through. I have the following string in the whitelist > > [EMAIL PROTECTED]|ip=none|totscore > -100 > > I think that means that they are whitelisted but mail from them still > scores more than 7 and they are bounced. > > Is there some way to read out the whitelist and blacklist? Well, first, realize this is the AWL, which is called the "auto whitelist" but it's NOT really a whitelist. It's a score-averager that results in automatic white and blacklist behaviors. I would not depend on it to auto-fix problems with particular senders. It's intended to fix problems where a sender you frequently communicate with occasionally sends a message that's slightly spam-like in appearance. It cannot fix problems of a constant nature, as these will just fold into the averages. See http://wiki.apache.org/spamassassin/AutoWhitelist and: http://wiki.apache.org/spamassassin/AwlWrongWay As for extracting the AWL, you'll need the check-whitelist script. This comes in the source tarball in the tools directory, but most distro-packages do not install it. You can get it by downloading the 3.0.3 tarball from: http://archive.apache.org/dist/spamassassin/
