just got a spam that SA 2.55 not only didn't catch, but specifically let through because of whitelisting. I don't have a manual whitelist that matches this message, but I do have auto-whitelist turned on.
Is there a way to parse the auto whitelist files and see what's in them? I'm concerned that someone's found a way to externally manipulate them via auto-whitelist or bayes.
thanks,
For what it's worth, on my system, there are default whitelists defined in /usr/share/spamassassin/60_whitelist.cf .
For the autowhitelist, you can try this script (which is on my system in /usr/share/doc/spamassassin/examples/check_whitelist:
#--cut here-- #!/usr/bin/perl
use strict; use Fcntl;
# must match line at top of lib/Mail/SpamAssassin/DBBasedAddrList.pm.
# now off until 3.0
# BEGIN { @AnyDBM_File::ISA = qw(DB_File GDBM_File NDBM_File SDBM_File); }use AnyDBM_File ; use vars qw( %h $k $v ) ;
my $db;
if ($#ARGV == -1) {
$db = $ENV{HOME}."/.spamassassin/auto-whitelist";
} else {
$db = $ARGV[0];
}tie %h, "AnyDBM_File",$db, O_RDONLY,0600
or die "Cannot open file $db: $!\n";
my @k = grep(!/totscore$/,keys(%h));
for my $key (@k)
{
my $t = $h{"$key|totscore"};
my $v = $h{$key};
if(defined($t)) {
printf "% 8.1f %15s -- %s\n",
$t/$v, (sprintf "(%.1f/%d)",$t/$v,$v),
$key;
}
}
untie %h;
# -- end --------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
