> On Mar 14, 2016, at 6:42 AM, RW <rwmailli...@googlemail.com> wrote: > > On Sat, 12 Mar 2016 14:23:27 -0700 > @lbutlr wrote: > >> On Sat Mar 12 2016 11:04:45 RW <rwmailli...@googlemail.com> >> said: >>> >>> On Sat, 12 Mar 2016 18:18:10 +0100 >>> Reindl Harald wrote: >>> >>>> BTW - what is the purpose of a more then queistionable poison pill >>>> based on URIBL_BLACK for headers but only score URIBL_BLACK in case >>>> of clickable links with 1.7? >>> >>> because HEADER_HOST_IN_BLACKLIST is a manual black-list >>> email.amctheatres.com will be configured somewhere locally. >> >> Right. My question was not ?why does this happen? but ?where is this >> blacklist? >> >> It is not in /usr/local/etc/mail/spamassassin and it is not in >> $HOME/.spamassassin/ > > > Unless you actually saw email.amctheatres.com in X-Spam-Report, or in > debug, it's probably not what you are looking. > > It slipped my mind, but HEADER_HOST_IN_BLACKLIST is misleading > > https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7256
That explains it. Since it is checking both the body and the headers I have to check the source of the message and see what it’s hitting. The blacklist setting I have, I thought, were pretty straight forward: blacklist_from *.119 blacklist_from *.administrator blacklist_from *.admin blacklist_from *.adsl blacklist_from *.arpa blacklist_from *.bac blacklist_from *.beeline blacklist_from *.cici blacklist_from *.coma blacklist_from *.dhcp blacklist_from *.dlink blacklist_from *.dns blacklist_from *.domain blacklist_from *.dynamic blacklist_from *.dyndns\.org blacklist_from *.dyn blacklist_from *.firewall blacklist_from *.gateway blacklist_from *.gt_3g blacklist_from *.gt-3g blacklist_from *.hananet blacklist_from *.home blacklist_from *.internal blacklist_from *.intern blacklist_from *.janak blacklist_from *.kornet blacklist_from *.lab blacklist_from *.lan blacklist_from *.localdomain blacklist_from *.localhost blacklist_from *.local blacklist_from *.loc blacklist_from *.lokal blacklist_from *.mail blacklist_from *.nat blacklist_from *.netzwerk blacklist_from *.pc blacklist_from *.private blacklist_from *.privat blacklist_from *.priv blacklist_from *.router blacklist_from *.setup blacklist_from *.skbroadband blacklist_from *.tbroad -- This is to say: while it was true that they had just appeared in this particular set of dimensions, it was also true that they had been living in them all along. It is at this point that normal language gives up, and goes and has a drink. --Colour of Magic