> There were a few threads on the SA mailinglist about it, > but I have been unable to find anything useful... > and all the SA chatter was complaining about not setting > up trust correctly which in my case is dependent on > amavisd and is correct. > > Like a lot of places we are getting spam like this: > From: [email protected] > To: [email protected] > (where my domain is example.com) > > The AWL is kicking in large negative scores even when the > mail is coming from netblocks never seen before (it keeps > track of /16's in the db) for mail supposedly from local users. > > This is an old installation that's been in service for some > time now and up until now, there's never been a problem > like this. Local mail is correctly marked ALL_TRUSTED and > filtering happens as expected. > > An upgrade for all of these components is in the works, so > if this is resolved in later releases it would help to know that > (and I'll go away). > > amavisd-new-2.5.2 (20070627) > SpamAssassin 3.2.4 on Perl 5.8.7 > AWL in MySQL > > After reading the ChangeLogs for all these I don't see anything > directly relevant, and the AWL code in 3.2.5 isn't much different. > > My current thought is to write a plugin to counteract AWL's score > if it matches my criteria, but I'd rather fix the problem than the > symptom.
Is the problem in that the spammer's IP address happens to fall into a /16 cidr range of your own networks? If yes, AWL would need to be modified to store more specific address. If not, this shouldn't be happening - you may want to take one such mail sample and run it through a command line spamassassin with debugging, and see why AWL behaves as it does: # su vscan -c 'spamassassin -t -D <0.msg' Mark ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
