On Fri, 14 Jul 2017 10:00:45 +0200 Matus UHLAR - fantomas wrote: > >Robert Kudyba <rkud...@fordham.edu> wrote:
> >> Jul 13 23:04:05 storm spamd[13378]: spamd: processing message > >> <9ca00a710c6bfad3d60dd424cd79ac19.squirrel@our-domain> for > >> root:1001 Jul 13 23:04:20 storm spamd[13378]: spamd: clean message > >> (-101.5/5.0) for root:1001 in 15.0 seconds, 1193 bytes. Jul 13 > >> 23:04:20 storm spamd[13378]: spamd: result: . -101 - > >> ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST scantime=15.0 > >> [...] > > > >Hitting PYZOR_CHECK is scary. > > not at all. well, it MAY cause some delay but the default pyzor > timeout is 3.5 seconds It's hitting ALL_TRUSTED so I think he probably means it's that's it's scary that his own mail hit PYZOR_CHECK. It's probably an empty body or just a standard signature. If you use pyzor it's a good idea to run, at very least, echo "" | pyzor local_whitelist Possibly with --homedir= or --local-whitelist set as appropriate, or run it as any unix user and copy ~/.pyzor/whitelist to the equivalent location that's used by SA.
