Matt, looks like you hit that target on this. There are tons of whitelist_from_rcvd directives in /etc/spamassassin/70_sare_whitelist.cf including the problem addresses. I'll need to figure out a way to override these. Does blacklist_from take precedence over whitelist_from or whitelist_from_rcvd?
Thanks! On Sun, 2007-07-15 at 20:26 -0400, Matt Kettler wrote: > Lindsay nHaisley wrote: > > I've recently discovered a couple of emails tagged by SA (v3.2.1-gr1) > > with USER_IN_WHITELIST and assigned score components of -100 accordingly > > according to 50_scores.cf on the basis of a call to > > eval:check_from_in_whitelist() in 60_whitelist.cf. > > > What about whitelist_from_rcvd, or whitelist_from_spf? > > Do you have any whitelist commands at the site config level (ie: > local.cf or add-on rulesets)? -- Lindsay Haisley | "In an open world, | PGP public key FMP Computer Services | who needs Windows | available at 512-259-1190 | or Gates" | http://pubkeys.fmp.com http://www.fmp.com | |