On Thu, 2009-03-26 at 06:55 -0600, The Doctor wrote: > On Thu, Mar 26, 2009 at 08:45:46AM -0400, Matt Kettler wrote:
> > > > http://wiki.apache.org/spamassassin/AutoWhitelist > > http://wiki.apache.org/spamassassin/AwlWrongWay > Key on the word intranet. This sender is from inside the LAN. > > This sender should be score -1000 on the AWL and not +30. Nope. AWL is based on the senders email address, the originating net block and the past history. That's it. There's no concept of "internal network" in there. Since it's generated inside your internal network, ALL_TRUSTED should fire. Maybe you need to correct your internal and trusted networks settings. > Right then spamassassin --remove-addr-from-whitelist > > is that spamassassin --remove-addr-from-whitelist <friendly e-mail address>? As per the docs, it is --remove-addr-from-whitelist=addr Note the equals sign here, and no space. Also its irrelevant if it is a friendly, hostile or just plain forged address... Anyway, what was the overall score for that message, and which rules fired? What about the past messages scores and hits? You'll need that info to find out why AWL suddenly "goes crazy". The above is just a quick fix, though not necessarily a solution. -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}