Hi, haven't read the article in your link but as far as I can tell there are very simple rules to obey to in order to prevent AWL to be polluted:
1 - SPF enable and blocking... 2 - Learn HAM/SPAM regulary and correctly make SA aware of it's mistakes (when user marks message as SPAM/HAM feed to sa-learn again, tags removed. 3 - reduce AWL weight in message HAM/SPAM classification this is been working for me for a very long time running servers. Some AWL dbs average 500MB and false positives/negatives are, for 100K msgs average, less than 20 - and usualy stay within my target scores: HAM: -5 SPAM:5-7 REJECT:7- AM agmsoft(at)gmail.com 2010/4/15 PakOgah <pako...@pala.bo-tak.info>: > After reading the article on > http://www.sns.ias.edu/~jns/wp/2006/03/08/the-problem-with-spamassassins-autowhitelist-feature/ > " Just lately, a significant percentage of spam seems to comprise such > spoofed email and in this case the one message in ten from joe that happens > to be spam often gets classified as ham." > > I am almost agree with it and I want to disable AWL feature on SA, > as currently many spam mail using spoofed address and with AWL score it can > easily change final score of spam email by reducing it and it goes below > cut-off score (12) > sample below, If I am not activating AWL then this spam will have score 20.5 > and wont get pass into my inbox. > But before doing that, I want to know do you also disable AWL feature or > not? Can I have your reason? Thanks before > > X-Spam-Flag: YES > X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on > svr-m1.myholding.com > X-Spam-Level: ********* > X-Spam-Status: Yes, score=9.5 required=5.0 tests=AWL,BAYES_99, > > DK_POLICY_SIGNALL,DK_POLICY_TESTING,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_DATE, > MISSING_MID,SARE_HTML_A_BODY,URIBL_AB_SURBL,URIBL_BLACK,fw_wg_as_spam, > spf_softfail autolearn=unavailable version=3.2.5 > X-Spam-Report: > * 2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist > * [URIs: labirinto.net] > * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% > * [score: 1.0000] > * 0.0 MISSING_MID Missing Message-Id: header > * 0.0 MISSING_DATE Missing Date: header > * 2.5 spf_softfail spf_softfail > * 8.0 fw_wg_as_spam fw_wg_as_spam > * 0.0 DK_POLICY_SIGNALL Domain Keys: policy says domain signs all mails > * 0.0 DK_POLICY_TESTING Domain Keys: policy says domain is testing DK > * 0.0 HTML_MESSAGE BODY: HTML included in message > * 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts > * 0.7 SARE_HTML_A_BODY FULL: Message body has very strange HTML sequence > * 1.9 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist > * [URIs: labirinto.net] > * -11 AWL AWL: From: address is in the auto white-list > > --------------------------------------------------------------------------------- > Qmailtoaster is sponsored by Vickers Consulting Group > (www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and installations. > If you need professional help with your setup, contact them today! > --------------------------------------------------------------------------------- > Please visit qmailtoaster.com for the latest news, updates, and packages. > To unsubscribe, e-mail: > qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------------------- Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! --------------------------------------------------------------------------------- Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
