Re: Pls explain my false positive

2007-06-15 Thread Theo Van Dinter
On Fri, Jun 15, 2007 at 10:00:43AM -0400, Michael B Allen wrote:
 X-Spam-Status: Yes, score=5.3 required=5.0 tests=AWL autolearn=no 
 version=3.1.9
 X-Spam-Report:
 *  5.3 AWL AWL: From: address is in the auto white-list
 
 I don't see an explaination. Where is the explaination?

It's right there.  The AWL (think score averager) gave it a 5.3.

 Is SA taking into consideration that I previously sent a spam from the
 same address?

Yes.  That's what the AWL does.

 Was it flagged because the message was so simple?

No

 Why did AWL *increase* the score rather than reduce?

Because it's a score averager.  See
http://wiki.apache.org/spamassassin/AwlWrongWay

 How does SA know that the address is in the auto white-list?

Because it looked in the database and the address was there?

-- 
Randomly Selected Tagline:
There are two things in life one should always remember:
   1. Never tell everything you know.


pgp86hKMmUywa.pgp
Description: PGP signature


Re: Pls explain my false positive

2007-06-15 Thread Daniel Boland

Michael B Allen wrote:
 Hi,

 I just installed SA on a stock CentOS 5 machine. I forwarded a spam to it
 and it worked. Then I sent a very short hi message that I would expect
 should make it through but it did not.

 From looking at the X-Spam headers:

 X-Spam-Status: Yes, score=5.3 required=5.0 tests=AWL autolearn=no 
version=3.1.9

 X-Spam-Report:
 *  5.3 AWL AWL: From: address is in the auto white-list

 I don't see an explaination. Where is the explaination?

 Why was this flagged?

 Is SA taking into consideration that I previously sent a spam from the
 same address?

Yes, more information about auto white-list can be found here:
http://wiki.apache.org/spamassassin/AutoWhitelist


If you are testing spam assassin with spam or ham then you should not send 
it to yourself; but instead pipe the original message to spam assassin. i 
 use something like this:


  cat SPAM_MSG | spamassassin -D  OUTPUT_MSG


Dan





Re: Pls explain my false positive

2007-06-15 Thread Michael B Allen
On Fri, 15 Jun 2007 11:42:43 -0400
Theo Van Dinter [EMAIL PROTECTED] wrote:

 On Fri, Jun 15, 2007 at 10:00:43AM -0400, Michael B Allen wrote:
  X-Spam-Status: Yes, score=5.3 required=5.0 tests=AWL autolearn=no 
  version=3.1.9
  X-Spam-Report:
  *  5.3 AWL AWL: From: address is in the auto white-list
  
  I don't see an explaination. Where is the explaination?
 
 It's right there.  The AWL (think score averager) gave it a 5.3.
 
  Is SA taking into consideration that I previously sent a spam from the
  same address?
 
 Yes.  That's what the AWL does.
 
  Was it flagged because the message was so simple?
 
 No
 
  Why did AWL *increase* the score rather than reduce?
 
 Because it's a score averager.  See
 http://wiki.apache.org/spamassassin/AwlWrongWay
 
  How does SA know that the address is in the auto white-list?
 
 Because it looked in the database and the address was there?

Ahh, I get it. This is everything I wanted to hear.

Thanks,
Mike

-- 
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/