On Thu, Mar 31, 2005 at 10:27:58PM -0600, Chris wrote: > On Thursday 31 March 2005 08:56 pm, Jeff Chan wrote: > > On Thursday, March 31, 2005, 6:50:17 PM, Chris Chris wrote: > > > I subscribe to the EFF Newsletter, it keeps repeatedly getting tagged as > > > spam. I've put the 'from' address in my manual whitelist which has helped > > > to lower the score to a tad above my spam threshold of 5.0. I've saved > > > some of the previous editions and am wondering if I ran sa-learn --ham on > > > these would it eventually make enough of a difference to have these > > > tagged as ham? > > > > What is it triggering on? > > > > Jeff C. > > Here's the latest one to come in: > > X-Spam-Status: Yes, score=5.2 required=5.0 tests=AWL,BAYES_50,PYZOR_CHECK, > SARE_MILLIONSOF,SARE_MONEYTERMS autolearn=disabled version=3.0.2 > X-Spam-Pyzor: Reported 0 times. > X-Spam-Report: > * 0.7 SARE_MONEYTERMS BODY: Talks about money in some way. > * 0.3 SARE_MILLIONSOF BODY: Millions of something. > * 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% > * [score: 0.5000] > * 3.5 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) > * 0.8 AWL AWL: From: address is in the auto white-list > > Looking at the previous months newsletter it hit on: > > X-Spam-Status: Yes, score=6.2 required=5.0 tests=AWL,BAYES_50,DCC_CHECK, > DIGEST_MULTIPLE,PYZOR_CHECK,URIBL_SBL autolearn=disabled version=3.0.2 > X-Spam-Pyzor: Reported 0 times. > X-Spam-Report: > * 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% > * [score: 0.5000] > * 3.5 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) > * 2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/) > * 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist > * [URIs: michaelgeist.ca] > * 0.1 DIGEST_MULTIPLE Message hits more than one network digest check > * -0.5 AWL AWL: From: address is in the auto white-list > > -- > Chris > Registered Linux User 283774 http://counter.li.org > 22:26:27 up 18 days, 3:01, 1 user, load average: 0.39, 2.15, 1.94 > Mandrake Linux 10.1 Official, kernel 2.6.8.1-12mdk > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
By "manual whitelist" do you mean you have an entry in your ~/.spamassassin/user_prefs or /etc/mail/spamassassin/local.cf that says whitelist_from <the from address> If so, such an entry should subtract 100 points from the total score. It appears that whatever you put in the whitelist_from is not matching what's in the From: line. Could you show your whitelist_from line and a sample header of the subject email? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Everyone wants to harvest, but few want to plow.
