On Sun, 15 Aug 2010, Marc Richter wrote:
http://pastebin.com/Rhj2UMLS
I don't understand 3 things:
1) Why is it recognized as not beeing spam, although the required score
is 3.0 and the actual score is 101.0?
Look a little closer. The actual score is -101.0 (negative).
Is this because of points 2) and 3)?
2) Why does ALL_TRUSTED hit here? I haven't configured mx0.gmx.net
anywhere.
Odd. I'd have expected pop.gmx.net to have prevented ALL_TRUSTED. I can't
suggest why this might have occurred, perhaps one of the devs a little
closer to that code will comment.
ALL_TRUSTED isn't by itself contributing to the problem, but it is useful
as a symptom.
3) Why does USER_IN_WHITELIST apply here? "iyeboxfzpfj
<zyy...@alxhkv.com>" is noone I've put onto any whitelist.
In the user_prefs of user "ww" the only "WHITE" - Thing is:
whitelist_from *...@web-factory.de
whitelist_from *...@marketing-factory.de
which is my company's domain.
As I just recommended to someone else, do not use whitelist_from except as
a last resort. It is trivially easy for a spammer to leverage as it does
not verification that the From address is not forged.
Here's my whole global SA config:
http://pastebin.com/DixnLNmv
I note you're using whitelist_from_rcvd in your global config. Good.
However, changing the required_score to 3.0 is not recommended. All of the
scores assigned by the masscheck system are targeted at a required_score
of 5.0, and if you lower that without making any adjustment to rule scores
then you are likely going to increase your false positive rate.
Can you post the ww user's config too?
Could anybody please give me a hint with this?
The whitelist hit is what's hurting the most.
You should also take a look at your bayes, after we resolve the whitelist
problem.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Vista is at best mildly annoying and at worst makes you want to
rush to Redmond, Wash. and rip somebody's liver out. -- Forbes
-----------------------------------------------------------------------
Today: the 65th anniversary of the end of World War II
