Ilan, you could adopt my strategy and simply turn off auto-whitelist
and delete the auto-whitelist file. I've seen too many mis-trained
auto-whitelists mentioned on this list to be at all comfortable with
it. The same can be said for auto-learn with Bayes.
At the VERY least set the thresholds for auto this and that MUCH wider
than they come stock.
It appears you have a spam message yet auto-whitelist thinks it is
ham. (If it really was ham, you found a reason to sort spam into a
spam mailbox and at least glance at the trash before tossing it.)
{^_^}
----- Original Message -----
From: "Ilan Aisic" <[EMAIL PROTECTED]>
Matt,
I've modified the permissions on my auto-whitelist file and directory
to 777 even though I don't see why this is needed since spamd runs as
root.
Anyway, I did as advised and ran spamassassin -D < test (intead of the
--lint option) and I ran it twice on 2 messages from the same address
(2nd was spammy). This way it does work as adveritsed (see excerpt
from output below). I ran an `od -c ` on the file and was able to
see the test email address in there.
However, I then restarted the daemon and it does not touch the
auto-whitelist at all (I sent myself few emails from the outside and
the auto-whitelist file wasn't touched and I didn't see AWL lines in
the X-Spam-Report)
....
....
debug: running header regexp tests; score so far=17.627
debug: lock: 31007 created /var/spool/spamassassin/auto-whitelist.mutex
debug: lock: 31007 trying to get lock on
/var/spool/spamassassin/auto-whitelist
with 30 timeoutdebug: lock: 31007 link to
/var/spool/spamassassin/auto-whitelist.mutex: link ok
debug: Tie-ing to DB file R/W in /var/spool/spamassassin/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=204.11 scores 1/3.925
debug: AWL active, pre-score: 17.627, autolearn score: 17.627, mean: 3.925,
IP:
204.11.105.95
debug: add_score: New count: 2, new totscore: 21.552
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.debug: unlock: 31007
unlocked /var/spool/spamassassin/auto-whitelist.mutex
debug: Post AWL score: 10.776
debug: running body-text per-line regexp tests; score so far=10.776
debug: running uri tests; score so far=10.776
debug: running raw-body-text per-line regexp tests; score so far=10.776
debug: running full-text regexp tests; score so far=10.776
debug: auto-learn: currently using scoreset 1.
debug: auto-learn: message score: 10.776, computed score for autolearn:
18.627
debug: auto-learn? ham=0.1, spam=12, body-points=12.251,
head-points=6.494, learned-points=0
debug: auto-learn? yes, spam (18.627 > 12)
debug: Learning Spam
....
X-Spam-Report:
....
* -6.9 AWL AWL: From: address is in the auto white-list
....
On 8/24/05, Matt Kettler <[EMAIL PROTECTED]> wrote:
At 05:15 AM 8/24/2005, Ilan Aisic wrote:
>Hi,
>I'm running SA 3.0.2 with Exim 4.5. spamd runs as root.
Warning: You are subject to a remote DoS attack on SA's mime parser, it's
triggered by sending you a malformed message. Upgrade to 3.0.4.
http://marc.theaimsgroup.com/?l=spamassassin-announce&m=111886630726077&w=2
>I think I've set my configuration to have a system-wide
>auto-whitelisting.
>However, I've noticed that even though the file "auto-whitelist"
>always remains 12,288 bytes long and unchanged and naturally, scores
>aren't affected.
>Everytime I restart spamd, the file gets a new timestamp though.
>
>I'd appreciate any advice.
>
>My auto-whitelist related comamnds in the local.cf file are:
>auto_whitelist_path /var/spool/spamassassin/auto-whitelist
>auto_whitelist_file_mode 0666
change that mode from 0666 to 0777
----------------
auto_whitelist_file_mode(default: 0700)
The file mode bits used for the automatic-whitelist directory or file.
Make sure you specify this using the 'x' mode bits set, as it may also be
used to create directories. However, if a file is created, the resulting
file will not have any execute bits set (the umask is set to 111).
-----------------
What are the permissions on the existing directory and file?
Elsewhere Kevin wrote:
>This isn't terribly helpful.
Why isn't it? --lint does run a message, and you can see that it hasn't
learned it before...
> Please try running with a real email, using the syntax:
>
>spamassassin -t -D < testemail
Drop that -t... in SA 3.0.0 and higher -t disables the AWL and bayes
autolearner.
http://bugzilla.spamassassin.org/show_bug.cgi?id=2632
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
