Running SA 3.4.0 from April 1st, 2013. I'm seeing an issue where obvious
spam is reporting as whitelisted from SA for some users. We do not have
per-user whitelisting, so it seems AWL as for some unknown and bizarre
reason, decided to whitelist this spam. The *same* emails for me get
marked as spam correctly.
Example scoring:
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=9.734 tagged_above=-10 required=3 WHITELISTED
tests=[BAYES_99=3.5, FSL_HELO_BARE_IP_1=2.347,
FSL_HELO_BARE_IP_2=1.738, LONG_TERM_PRICE=0.001,
RCVD_NUMERIC_HELO=1.164, RDNS_DYNAMIC=0.982, TVD_RCVD_IP=0.001,
TVD_RCVD_IP4=0.001] autolearn=no
No matter how much I feed these emails to SA for training as spam, the user
continues to have them show up whitelisted. I know I can disable AWL, but
is there any way to clear specific bits out of AWL so anything valid it has
picked up doesn't get lost?
Thanks,
Quanah
--
Quanah Gibson-Mount
Lead Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration
