On Fri, 2008-05-30 at 16:21 -0400, Greg Troxel wrote:
> I have recently understood AWL better, and am wondering if there should
> be some minimum number of entries before AWL is applied. I often get
> spam that doesn't score that high due to being a fresh relay. If I
> rescore it with '|spamassassin -t' after a few days, often it's on
> blacklists and scores a lot higher, but is pulled down by AWL.
What do you gain by re-scoring?
While the subject (and the name, Auto White List) might be confusing,
the main purpose AFAIK actually is to *white* list good senders, that
occasionally happen to send a spammy looking message. After all, most
senders are forged, and an "auto black list" effect is rather unlikely.
Even more so, since AWL takes the senders source net into account.
(Didn't grep through my corpus though, going from memory. ;)
> So, I wonder if a rule that said 'AWL is only applied if there are >=5
> scores in the average' would avoid giving credit for spam that arrived
> when it wasn't classified as high as it should be now.
Again, I don't see why you would re-score messages days later.
However, some mechanism to clean out single message senders, has been
mentioned before, and IIRC should be a known feature request. A (low)
threshold before AWL kicks in, possibly combined with a timeout for
pruning single message senders would be rather related.
guenther
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
