Nevermind. Someone has whitelisted our url in user-prefs.


robanna wrote:
> 
> Lately, we've been getting a bunch of spam with negative scores because it
> has triggered USER_IN_WHITELIST but we don't use whitelist_from*. About 2
> weeks ago I removed whitelist_from_rcvd. Could it still be triggering it.
> Maybe the spam was sent a few weeks ago and just now being deliver to the
> users?
> 
> Any ideas why?
> 
> Email head:
> From:   user
> Subject: RE: Get your mind cleared from additional problems. 
> Date: November 12, 2008 11:25:03 AM MST
> To:   user
> Return-Path: <[EMAIL PROTECTED]>
> X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on server
> X-Spam-Level: 
> X-Spam-Status: No, score=-70.5 required=5.5 tests=BAYES_50,HTML_50_60,
> HTML_EXTRA_CLOSE,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,
> MIME_HTML_ONLY,MSGID_FROM_MTA_ID,NO_REAL_NAME,PYZOR_CHECK,URIBL_AB_SURBL,
> URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL,
> USER_IN_WHITELIST autolearn=no version=3.1.9
> Received: from Jolanta (host-81-190-116-29.gdynia.mm.pl [81.190.116.29])
> by server with SMTP id mACIP34L021551 for <user>; Wed, 12 Nov 2008
> 11:25:04 -0700
> Mime-Version: 1.0
> Content-Type: text/html
> 
> /local.cf
> # These values can be overridden by editing ~/.spamassassin/user_prefs.cf 
> # (see spamassassin(1) for details)
> 
> # These should be safe assumptions and allow for simple visual sifting
> # without risking lost emails.
> 
> required_hits 5.5
> report_safe 0
> rewrite_header Subject [SPAM]
> use_auto_whitelist 0
> # Enable the Bayes system
> use_bayes               1
> # Enable Bayes auto-learning
> bayes_auto_learn              1
> use_razor2              1
> use_pyzor               1
> skip_rbl_checks         1
> 
> internal_networks       192.168.1/24
> internal_networks       192.168.2/24
> internal_networks       192.168.3/24
> internal_networks       192.168.4/24
> internal_networks       192.168.5/24
> trusted_networks       192.168.1/24
> trusted_networks       192.168.2/24
> trusted_networks       192.168.3/24
> trusted_networks       192.168.4/24
> trusted_networks       192.168.5/24
> 
> 

-- 
View this message in context: 
http://www.nabble.com/USER_IN_WHITELIST-triggered-but-whitelist_from*-not-in-my-config-tp20470780p20471035.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Reply via email to