The Doctor wrote: > > Key on the word intranet. This sender is from inside the LAN.
This is irrelevant. AWL doesn't care where the mail is coming from. It only knows that sen...@example.com from XX.XX.XX.XX ip address has an average spam score of XX. If the next message from that same sender/ip combo has a different spam score than his previous average, AWL will make an adjustment to push his score towards the average. > This sender should be score -1000 on the AWL and not +30. Where do you get -1000? You can't assign scores to the AWL. The score will change depending on the history of the sender. > Right then spamassassin --remove-addr-from-whitelist > > is that spamassassin --remove-addr-from-whitelist <friendly e-mail address>? That will remove the current information from AWL for that email address. If there was an odd email that skewed the sender's average, this is the right way to deal with it. However, keep in mind that the AWL will continue to operate for this email address based on future email scores. Re-read the wiki entries for the AWL. http://wiki.apache.org/spamassassin/AutoWhitelist http://wiki.apache.org/spamassassin/AwlWrongWay -- Bowie