As far as I can guess, the problem could be the AWL (I think that
this
user is the same that had a problem some months ago with a worm virus
sending a lot of emails), but I run:
spamassassin --remove-addr-from-whitelist=<hisemail>
Without knowing the exact syntax, and this option: Wouldnt it be
something like --remove-addr-from-whitelist
ups sorry i wanted: --remove-addr-from-blacklist (copynpaste)
Seems i am completely wrong:
from:http://wiki.apache.org/spamassassin/AwlWrongWay
If your AWL is pulling scores wildly in the wrong direction and you have no
idea why, check your configuration for problems. This is especially true if you
use add-on rules or custom rules. If an errantly scored email got averaged into
the AWL once, it can happen again, and tweaking the AWL is only going to
provide a short-term solution to a greater problem.
hth
MH