You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Roman Sozinov <le...@newmail.ru> on 2006/10/27 09:21:56 UTC
AWL and whitelists
Hi all!
I don't understand something in AWL working and want somebody clears it for
me.
I know that AWL is a score averaging system and it's bad idia to use it as
whitelist, but there is possibility --add-to-whitelist(-W) to add e-mail to
AWL with -100 score. This possibility works very strange.
I use sql-backend and see last changes.
My actions:
1. Add email in awl with score -100
spamassassin -W test-email
In awl appears new row: email|none|1|-100 (e-mail|ip|count|score)
2. I do first test check:
cat test-email | spamc -R
Content analysis details: (-49.4 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.6 HTML_SHORT_LENGTH BODY: HTML is extremely short
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
-51 AWL AWL: From: address is in the auto white-list
In awl row: email|62.234|1|1.109 (e-mail|ip|count|score)
Something strange: count is 1 still and score has become 1.109 :(
3. I do second check
cat test-email | spamc -R
Content analysis details: (1.1 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.6 HTML_SHORT_LENGTH BODY: HTML is extremely short
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
In awl row: email|62.234|2|2.218 (e-mail|ip|count|score)
Where is AWL check in the second check report?
I expected that address will have negative score after add-to-whitelist, but
it works only for a one trying. The second(and further) trying it doesn't
work....
Why awl doesn't work as it must work - it must smoothly change score - e.g.
-49.4, -25, -15 and so on... But it doesn't.
Where am i not right?
p.s.
My system:
FreeBSD 5.4/Spamassassin 3.1.5/MySQL 4.1.18
--
View this message in context: http://www.nabble.com/AWL-and-whitelists-tf2518983.html#a7025648
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: R: R: AWL and whitelists
Posted by Roman Sozinov <le...@newmail.ru>.
Giampaolo Tomassoni wrote:
>
>> >> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score)
>> >> Something strange: count is 1 still and score has become 1.109 :(
>> >
>> > What happened to the email|none row? Is it still there?
>> >
>> Yes it still there:
>> email|62.234|1|1.109 (e-mail|ip|count|score)
>
> You mean you don't have anymore an email|none row?
>
> Giampaolo
>
Yes i mean it. There is no email|none row anymore...
--
View this message in context: http://www.nabble.com/AWL-and-whitelists-tf2518983.html#a7049243
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
R: R: AWL and whitelists
Posted by Giampaolo Tomassoni <g....@libero.it>.
> >> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score)
> >> Something strange: count is 1 still and score has become 1.109 :(
> >
> > What happened to the email|none row? Is it still there?
> >
> Yes it still there:
> email|62.234|1|1.109 (e-mail|ip|count|score)
You mean you don't have anymore an email|none row?
Giampaolo
Re: R: AWL and whitelists
Posted by Roman Sozinov <le...@newmail.ru>.
Giampaolo Tomassoni wrote:
>
>> 2. I do first test check:
>> cat test-email | spamc -R
>> Content analysis details: (-49.4 points, 5.0 required)
>> pts rule name description
>> ---- ----------------------
>> --------------------------------------------------
>> 0.6 HTML_SHORT_LENGTH BODY: HTML is extremely short
>> 0.0 HTML_MESSAGE BODY: HTML included in message
>> 0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in
>> abuse.rfc-ignorant.org
>> -51 AWL AWL: From: address is in the auto white-list
>> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score)
>> Something strange: count is 1 still and score has become 1.109 :(
>
> What happened to the email|none row? Is it still there?
>
Yes it still there:
email|62.234|1|1.109 (e-mail|ip|count|score)
Giampaolo Tomassoni wrote:
>
>> 3. I do second check
>> cat test-email | spamc -R
>> Content analysis details: (1.1 points, 5.0 required)
>> pts rule name description
>> ---- ----------------------
>> --------------------------------------------------
>> 0.6 HTML_SHORT_LENGTH BODY: HTML is extremely short
>> 0.0 HTML_MESSAGE BODY: HTML included in message
>> 0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in
>> abuse.rfc-ignorant.org
>> In awl row: email|62.234|2|2.218 (e-mail|ip|count|score)
>> Where is AWL check in the second check report?
>
> Again, se if an email|null is still there
>
> Anyway, to whitelist a message source, use whitelist_from or, even better,
> whitelist_from_rcvd in your .cf file.
>
> If you use AWL to do this, your whitelist score may get "consumed" after a
> while.
>
> Giampaolo
>
I can't use .cf file because it's dynamic mail system and users can alert
about spam/not spam with the special buttons in webmail (like gmail).
I don't understand how AWL works with '--add-to-whitelist' function....
--
View this message in context: http://www.nabble.com/AWL-and-whitelists-tf2518983.html#a7026194
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
R: AWL and whitelists
Posted by Giampaolo Tomassoni <g....@libero.it>.
> Hi all!
> I don't understand something in AWL working and want somebody
> clears it for
> me.
> I know that AWL is a score averaging system and it's bad idia to use it as
> whitelist, but there is possibility --add-to-whitelist(-W) to add
> e-mail to
> AWL with -100 score. This possibility works very strange.
> I use sql-backend and see last changes.
>
> My actions:
> 1. Add email in awl with score -100
> spamassassin -W test-email
> In awl appears new row: email|none|1|-100 (e-mail|ip|count|score)
>
> 2. I do first test check:
> cat test-email | spamc -R
> Content analysis details: (-49.4 points, 5.0 required)
> pts rule name description
> ---- ----------------------
> --------------------------------------------------
> 0.6 HTML_SHORT_LENGTH BODY: HTML is extremely short
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
> -51 AWL AWL: From: address is in the auto white-list
> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score)
> Something strange: count is 1 still and score has become 1.109 :(
What happened to the email|none row? Is it still there?
> 3. I do second check
> cat test-email | spamc -R
> Content analysis details: (1.1 points, 5.0 required)
> pts rule name description
> ---- ----------------------
> --------------------------------------------------
> 0.6 HTML_SHORT_LENGTH BODY: HTML is extremely short
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
> In awl row: email|62.234|2|2.218 (e-mail|ip|count|score)
> Where is AWL check in the second check report?
Again, se if an email|null is still there
Anyway, to whitelist a message source, use whitelist_from or, even better, whitelist_from_rcvd in your .cf file.
If you use AWL to do this, your whitelist score may get "consumed" after a while.
Giampaolo
> I expected that address will have negative score after
> add-to-whitelist, but
> it works only for a one trying. The second(and further) trying it doesn't
> work....
> Why awl doesn't work as it must work - it must smoothly change
> score - e.g.
> -49.4, -25, -15 and so on... But it doesn't.
>
> Where am i not right?
>
> p.s.
> My system:
> FreeBSD 5.4/Spamassassin 3.1.5/MySQL 4.1.18
> --
> View this message in context:
> http://www.nabble.com/AWL-and-whitelists-tf2518983.html#a7025648
> Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
>