[EMAIL PROTECTED] wrote:
I had several false positives like this one coming from a list and i don't have a clue. Can somebody, please, help me interpret this headers? I don't understand where the 30.6 hits come from and why autolearn=ham if Spamflag is YES.
Spend some time using check_whitelist (i.e. check_whitelist ~/.spamassassin/auto-whitelist) to see what's in your auto-generated list. This sounds very much like a problem I had last year where I carelessly managed to have a list mail learned as spam, only to poison the entire list. This can also work the other way, allowing spam through on a list that tends to be spammed. Perhaps somebody sent test spams to an otherwise legit list?
The trick was to do spamassassin --remove-addr-from-whitelist=<[EMAIL PROTECTED]> to remove the bogus entries. Auto-whitelist can be problematic when use in conjunction with whitelist_from and blacklist_from in your .cf files. Be particularly careful with mailing lists.
- Bob
