Nevermind. Someone has whitelisted our url in user-prefs.
robanna wrote: > > Lately, we've been getting a bunch of spam with negative scores because it > has triggered USER_IN_WHITELIST but we don't use whitelist_from*. About 2 > weeks ago I removed whitelist_from_rcvd. Could it still be triggering it. > Maybe the spam was sent a few weeks ago and just now being deliver to the > users? > > Any ideas why? > > Email head: > From: user > Subject: RE: Get your mind cleared from additional problems. > Date: November 12, 2008 11:25:03 AM MST > To: user > Return-Path: <[EMAIL PROTECTED]> > X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on server > X-Spam-Level: > X-Spam-Status: No, score=-70.5 required=5.5 tests=BAYES_50,HTML_50_60, > HTML_EXTRA_CLOSE,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3, > MIME_HTML_ONLY,MSGID_FROM_MTA_ID,NO_REAL_NAME,PYZOR_CHECK,URIBL_AB_SURBL, > URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL, > USER_IN_WHITELIST autolearn=no version=3.1.9 > Received: from Jolanta (host-81-190-116-29.gdynia.mm.pl [81.190.116.29]) > by server with SMTP id mACIP34L021551 for <user>; Wed, 12 Nov 2008 > 11:25:04 -0700 > Mime-Version: 1.0 > Content-Type: text/html > > /local.cf > # These values can be overridden by editing ~/.spamassassin/user_prefs.cf > # (see spamassassin(1) for details) > > # These should be safe assumptions and allow for simple visual sifting > # without risking lost emails. > > required_hits 5.5 > report_safe 0 > rewrite_header Subject [SPAM] > use_auto_whitelist 0 > # Enable the Bayes system > use_bayes 1 > # Enable Bayes auto-learning > bayes_auto_learn 1 > use_razor2 1 > use_pyzor 1 > skip_rbl_checks 1 > > internal_networks 192.168.1/24 > internal_networks 192.168.2/24 > internal_networks 192.168.3/24 > internal_networks 192.168.4/24 > internal_networks 192.168.5/24 > trusted_networks 192.168.1/24 > trusted_networks 192.168.2/24 > trusted_networks 192.168.3/24 > trusted_networks 192.168.4/24 > trusted_networks 192.168.5/24 > > -- View this message in context: http://www.nabble.com/USER_IN_WHITELIST-triggered-but-whitelist_from*-not-in-my-config-tp20470780p20471035.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.