On Mon, April 6, 2009 19:44, Savoy, Jim wrote:
> Hi all,
> I just noticed that we have had auto_whitelisting turned off
> since 2005 (!). I just turned it
>
> back on (first deleting the auto_whitelist file in
> /home/exim/.spamassassin (we run a site-wide
> installation) and ensuring that file was re-created after
> restarting spamd). It seems to be working.

so far so good

> So now when I peruse the logs, I see the new tag AWL being added
> for the first time.

> But then I saw this fly by:
> Apr  6 10:54:12 mx1-server spamd[12713]: spamd: result: Y 18 -
> AWL,
> BAYES_99,
> DRUGS_ERECTILE,
> FB_CIALIS_LEO3,
> FORGED_OUTLOOK_HTML,
> FORGED_OUTLOOK_TAGS,
> FORGED_YAHOO_RCVD,
> HTML_MESSAGE,
> HTML_MIME_NO_HTML_TAG,
> MIME_HTML_ONLY,
> MSGID_OUTLOOK_INVALID,
> SPF_HELO_PASS,
> SUBJECT_DRUG_GAP_C,
> UNPARSEABLE_RELAY,
> URIBL_BLACK,
> URIBL_JP_SURBL,
> URIBL_SC_SURBL,
> URIBL_WS_SURBL,
> URIBL_ZEN
> scantime=6.5,size=1206,user=nobody,uid=108,required_score=5.0,
> rhost=localhost.localdomain,
> raddr=127.0.0.1,rport=45215,
> mid=<007401c4dc05$2105c210$7c07c...@gew>,
> bayes=0.999996,autolearn=spam

127.0.0.1 is not remote host :/

did you send it for testing ?

> It looks like it did everything correctly, giving the message a
> high score (18) and autolearning

if 127.0.0.1 indeed is remote yes

> it in Bayes, but I was surprised to see the AWL tag get slapped
> onto this one. Is that normal behaviour?

make sure that exim do send remote ip to sa, else it will work
badly, also that exim does not accept and bounce, i have seen it, if
its spam then reject

> We are running SpamAssassin 3.25.

-- 
http://localhost/ 100% uptime and 100% mirrored :)

Reply via email to