Mailing List Archive: SpamAssassin: users

Getting AWL to unlearn (SA 3.4.0 2013/04/01)

Index | Next | Previous | View Threaded

quanah at zimbra

Jul 29, 2013, 12:50 PM

Post #1 of 4 (77 views)
Permalink

Getting AWL to unlearn (SA 3.4.0 2013/04/01)

Running SA 3.4.0 from April 1st, 2013. I'm seeing an issue where obvious
spam is reporting as whitelisted from SA for some users. We do not have
per-user whitelisting, so it seems AWL as for some unknown and bizarre
reason, decided to whitelist this spam. The *same* emails for me get
marked as spam correctly.

Example scoring:

X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=9.734 tagged_above=-10 required=3 WHITELISTED
tests=[BAYES_99=3.5, FSL_HELO_BARE_IP_1=2.347,
FSL_HELO_BARE_IP_2=1.738, LONG_TERM_PRICE=0.001,
RCVD_NUMERIC_HELO=1.164, RDNS_DYNAMIC=0.982, TVD_RCVD_IP=0.001,
TVD_RCVD_IP4=0.001] autolearn=no

No matter how much I feed these emails to SA for training as spam, the user
continues to have them show up whitelisted. I know I can disable AWL, but
is there any way to clear specific bits out of AWL so anything valid it has
picked up doesn't get lost?

Thanks,
Quanah

--

Quanah Gibson-Mount
Lead Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration

me at junc

Jul 29, 2013, 1:19 PM

Post #2 of 4 (77 views)
Permalink

Re: Getting AWL to unlearn (SA 3.4.0 2013/04/01) [In reply to]

Quanah Gibson-Mount skrev den 2013-07-29 21:50:

> X-Spam-Status: No, score=9.734 tagged_above=-10 required=3
> WHITELISTED
> No matter how much I feed these emails to SA for training as spam,
> the user

its not whitelisted in sa, its amavisd

dont blame sa for this :)

rwmaillists at googlemail

Jul 29, 2013, 1:22 PM

Post #3 of 4 (77 views)
Permalink

Re: Getting AWL to unlearn (SA 3.4.0 2013/04/01) [In reply to]

On Mon, 29 Jul 2013 12:50:51 -0700
Quanah Gibson-Mount wrote:

> Running SA 3.4.0 from April 1st, 2013. I'm seeing an issue where
> obvious spam is reporting as whitelisted from SA for some users. We
> do not have per-user whitelisting, so it seems AWL as for some
> unknown and bizarre reason, decided to whitelist this spam. The
> *same* emails for me get marked as spam correctly.
>
> Example scoring:
>
> X-Spam-Flag: NO
> X-Spam-Score: 0
> X-Spam-Level:
> X-Spam-Status: No, score=9.734 tagged_above=-10 required=3 WHITELISTED
> tests=[.BAYES_99=3.5, FSL_HELO_BARE_IP_1=2.347,
> FSL_HELO_BARE_IP_2=1.738, LONG_TERM_PRICE=0.001,
> RCVD_NUMERIC_HELO=1.164, RDNS_DYNAMIC=0.982,
> TVD_RCVD_IP=0.001, TVD_RCVD_IP4=0.001] autolearn=no

Unless something major has changed between 3.3 and 3.4 that's not AWL.
AWL would show as an ordinary rule.

I'm guessing this whitelisting is something outside of SA such as
amavisd.

quanah at zimbra

Jul 29, 2013, 1:23 PM

Post #4 of 4 (77 views)
Permalink

Re: Getting AWL to unlearn (SA 3.4.0 2013/04/01) [In reply to]

--On Monday, July 29, 2013 10:19 PM +0200 Benny Pedersen <me [at] junc> wrote:

> Quanah Gibson-Mount skrev den 2013-07-29 21:50:
>
>> X-Spam-Status: No, score=9.734 tagged_above=-10 required=3
>> WHITELISTED
>> No matter how much I feed these emails to SA for training as spam,
>> the user
>
> its not whitelisted in sa, its amavisd
>
> dont blame sa for this :)

Ah, ok, thanks. ;) Which is odd too, but I have some ideas then to pursue
at least. Thanks!

--Quanah

--

Quanah Gibson-Mount
Lead Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads