LuKreme wrote: > Some spam has been matching the rule RP_MATCHES_RCVD which is worth -2.8 > points. I wanted to look at this rule, so I went to > /usr/local/etc/mail/spamassassin and gripped for the name, but no hits.
There was a thread on this rule not too long ago; check the list archives and in the meantime score it down or disable it completely. A fair bit of spam hits this here. :( It's also been scored down in more recent rule updates; as of a few minutes ago it looks like it's *way* down: score RP_MATCHES_RCVD -1.501 -0.001 -1.501 -0.001 Run sa-update regularly to get rule and score updates. > # find /usr/local -name "*cf" | grep -v postfix > /usr/local/etc/mail/spamassassin/local.cf > /usr/local/etc/mail/spamassassin/whitelist.cf > # SA stock rules haven't been shipped in the tarball for quite a while, and IIRC most packages don't include them any more either. They're downloaded by sa-update. "spamassassin -D --lint 2>&1 |grep LOCAL_STATE" should show the path they're under. On most systems where SA is installed from package, this looks something like /var/lib/spamassassin. -kgd
