Nevermind. Someone has whitelisted our url in user-prefs.
robanna wrote:
>
> Lately, we've been getting a bunch of spam with negative scores because it
> has triggered USER_IN_WHITELIST but we don't use whitelist_from*. About 2
> weeks ago I removed whitelist_from_rcvd. Could it still be triggering it.
> Maybe the spam was sent a few weeks ago and just now being deliver to the
> users?
>
> Any ideas why?
>
> Email head:
> From: user
> Subject: RE: Get your mind cleared from additional problems.
> Date: November 12, 2008 11:25:03 AM MST
> To: user
> Return-Path: <[EMAIL PROTECTED]>
> X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on server
> X-Spam-Level:
> X-Spam-Status: No, score=-70.5 required=5.5 tests=BAYES_50,HTML_50_60,
> HTML_EXTRA_CLOSE,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,
> MIME_HTML_ONLY,MSGID_FROM_MTA_ID,NO_REAL_NAME,PYZOR_CHECK,URIBL_AB_SURBL,
> URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL,
> USER_IN_WHITELIST autolearn=no version=3.1.9
> Received: from Jolanta (host-81-190-116-29.gdynia.mm.pl [81.190.116.29])
> by server with SMTP id mACIP34L021551 for ; Wed, 12 Nov 2008
> 11:25:04 -0700
> Mime-Version: 1.0
> Content-Type: text/html
>
> /local.cf
> # These values can be overridden by editing ~/.spamassassin/user_prefs.cf
> # (see spamassassin(1) for details)
>
> # These should be safe assumptions and allow for simple visual sifting
> # without risking lost emails.
>
> required_hits 5.5
> report_safe 0
> rewrite_header Subject [SPAM]
> use_auto_whitelist 0
> # Enable the Bayes system
> use_bayes 1
> # Enable Bayes auto-learning
> bayes_auto_learn 1
> use_razor2 1
> use_pyzor 1
> skip_rbl_checks 1
>
> internal_networks 192.168.1/24
> internal_networks 192.168.2/24
> internal_networks 192.168.3/24
> internal_networks 192.168.4/24
> internal_networks 192.168.5/24
> trusted_networks 192.168.1/24
> trusted_networks 192.168.2/24
> trusted_networks 192.168.3/24
> trusted_networks 192.168.4/24
> trusted_networks 192.168.5/24
>
>
--
View this message in context:
http://www.nabble.com/USER_IN_WHITELIST-triggered-but-whitelist_from*-not-in-my-config-tp20470780p20471035.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.