snowweb wrote: > > Terry Carmen wrote: > >>> This is the result, >>> >>> X-Spam-Level: >>> X-Spam-Status: No, score=-71.4 required=4.7 tests=HELO_DYNAMIC_IPADDR, >>> >>> HTML_IMAGE_ONLY_20,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3, >>> >>> MIME_HTML_ONLY,MISSING_DATE,MISSING_MID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL, >>> >>> RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE,RELAYCOUNTRY_PE,SARE_FROM_DRUGS, >>> >>> SARE_UNI,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,URIBL_WS_SURBL, >>> USER_IN_WHITELIST autolearn=no version=3.2.4 >>> X-Spam-Relay-Country: PE >>> >>> I can't understand what is going on here! How can it get a score like >>> that? >>> The message contained just an image and a link. >>> >> --> USER_IN_WHITELIST >> >> > > Ah ok. I hadn't seen that. By that does it mean "sender" or "user"? The > spammer is actually in my whitelist? Where can I check entries in my > whitelist please? > > USER_IN_WHITELIST would be sender.
Check your whitelist_from and whitelist_from_* statements in your local.cf. In particular, make sure you didn't make this common mistake: whitelist_from <insert your own address or domain here> Spammers *WILL* abuse this, regularly.
