You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Tom Vivian <to...@thevivians.net> on 2004/04/05 23:55:12 UTC
Why are emails from root being tagged as spam?
Below are 2 headers of emails that shouldn't be tagged.
I have both:
whitelist_from @atomixcreations.net
trusted_networks 192.168.0/16 127/8
in my /etc/mail/spamassassin/local.cf
Return-path: <ro...@atomixcreations.net>
Envelope-to: root@atomixcreations.net
Delivery-date: Mon, 05 Apr 2004 04:05:23 +0100
Received: from exim by atomixcreations.net with spam-scanned (Exim 4.04)
id 1BAKQN-00082z-00
for root@atomixcreations.net; Mon, 05 Apr 2004 04:05:23 +0100
Received: from localhost by atomixcreations.net
with SpamAssassin (2.63 2004-01-11);
Mon, 05 Apr 2004 04:05:23 +0100
From: root@atomixcreations.net (Cron Daemon)
To: root@atomixcreations.net
Subject: *****POSSIBLE SPAM***** Cron <ro...@atomixcreations> run-parts
/etc/cron.daily
Date: Mon, 5 Apr 2004 04:05:23 +0100
Message-Id: <20...@atomixcreations.net>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
atomixcreations.net
X-Spam-Level: **************************************************
X-Spam-Status: Yes, hits=105.5 required=5.0 tests=AWL autolearn=ham
version=2.63
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4070CCF3.6BDDB200"
Status:
---
Content analysis details: (108.4 points, 5.0 required)
pts rule name description
---- ---------------------- ------------------------------------------------
--
108 AWL AWL: Auto-whitelist adjustment
and
Return-path: <ro...@atomixcreations.net>
Envelope-to: root@atomixcreations.net
Delivery-date: Mon, 05 Apr 2004 04:02:05 +0100
Received: from exim by atomixcreations.net with spam-scanned (Exim 4.04)
id 1BAKNA-0007zi-00
for root@atomixcreations.net; Mon, 05 Apr 2004 04:02:05 +0100
Received: from localhost by atomixcreations.net
with SpamAssassin (2.63 2004-01-11);
Mon, 05 Apr 2004 04:02:05 +0100
From: root <ro...@atomixcreations.net>
To: root@atomixcreations.net
Subject: *****POSSIBLE SPAM***** LogWatch for atomixcreations.net
Date: Mon, 5 Apr 2004 04:02:03 +0100
Message-Id: <20...@atomixcreations.net>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
atomixcreations.net
X-Spam-Level: **************************************************
X-Spam-Status: Yes, hits=108.4 required=5.0 tests=AWL autolearn=ham
version=2.63
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4070CC2D.3D4E53A7"
Status:
---
Content analysis details: (105.5 points, 5.0 required)
pts rule name description
---- ---------------------- ------------------------------------------------
--
105 AWL AWL: Auto-whitelist adjustment
What have I done wrong?
Tom.
-----------------------------------
www: http://www.atomixsolutions.net
http://www.thevivians.net
tel: +44 (0)7980 560118
+44 (0)1765 635066
fax: +44 (0)1765 635461
icq: 16695403
msn: tomvivian17@msn.com
===================================
RE: Why are emails from root being tagged as spam?
Posted by Tom Vivian <to...@thevivians.net>.
As you might have guessed I'm pretty new to SA. When running
spamassassin --remove-from-whitelist root@atomixcreations
I get this:
Can't locate Mail/SpamAssassin/NoMailAudit.pm in @INC (@INC contains:
/usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/5.8.0 /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl) at
/usr/bin/spamassassin line 145.
BEGIN failed--compilation aborted at /usr/bin/spamassassin line 145.
Hmmmm :)
Tom.
> -----Original Message-----
> From: Matt Kettler [mailto:mkettler@evi-inc.com]
> Sent: 05 April 2004 23:05
> To: tom@thevivians.net; Spamassassin-Users
> Subject: Re: Why are emails from root being tagged as spam?
>
>
> At 05:55 PM 4/5/2004, Tom Vivian wrote:
> >Below are 2 headers of emails that shouldn't be tagged.
> >I have both:
> >
> >whitelist_from @atomixcreations.net
> >trusted_networks 192.168.0/16 127/8
> >
> >in my /etc/mail/spamassassin/local.cf
>
>
> From the looks of it, you sent a GTUBE through SA sent with root as your
> FROM:. You're picking up 108 points from the AWL, as it averages out 1000
> points across a relatively few messages.
>
> Try resetting root's AWL table with:
> spamassassin --remove-from-whitelist root@atomixcreations
>
>
Re: Why are emails from root being tagged as spam?
Posted by Matt Kettler <mk...@evi-inc.com>.
At 05:55 PM 4/5/2004, Tom Vivian wrote:
>Below are 2 headers of emails that shouldn't be tagged.
>I have both:
>
>whitelist_from @atomixcreations.net
>trusted_networks 192.168.0/16 127/8
>
>in my /etc/mail/spamassassin/local.cf
From the looks of it, you sent a GTUBE through SA sent with root as your
FROM:. You're picking up 108 points from the AWL, as it averages out 1000
points across a relatively few messages.
Try resetting root's AWL table with:
spamassassin --remove-from-whitelist root@atomixcreations
RE: Why are emails from root being tagged as spam?
Posted by Tom Vivian <to...@thevivians.net>.
Tried that and all I get is:
pts rule name description
---- ---------------------- ------------------------------------------------
--
-100 USER_IN_WHITELIST From: address is in the user's white-list
179 AWL AWL: Auto-whitelist adjustment
Tom.
> -----Original Message-----
> From: Fred [mailto:spamassassin@freddyt.com]
> Sent: 06 April 2004 00:05
> To: tom@thevivians.net; Spamassassin-Users
> Subject: Re: Why are emails from root being tagged as spam?
>
>
> I see a problem here, the whitelist_from is not taking effect because you
> need:
> whitelist_from *@atomixcreations.net
>
> The wildcard is important!
>
> Frederic Tarasevicius
> Internet Information Services, Inc.
> http://www.i-is.com/
> 810-794-4400
> mailto:info@i-is.com
>
>
>
> Tom Vivian wrote:
> > Below are 2 headers of emails that shouldn't be tagged.
> > I have both:
> >
> > whitelist_from @atomixcreations.net
> > trusted_networks 192.168.0/16 127/8
> >
> > in my /etc/mail/spamassassin/local.cf
> >
> > Return-path: <ro...@atomixcreations.net>
> > Envelope-to: root@atomixcreations.net
> > Delivery-date: Mon, 05 Apr 2004 04:05:23 +0100
> > Received: from exim by atomixcreations.net with spam-scanned (Exim
> > 4.04)
> > id 1BAKQN-00082z-00
> > for root@atomixcreations.net; Mon, 05 Apr 2004 04:05:23 +0100
> > Received: from localhost by atomixcreations.net
> > with SpamAssassin (2.63 2004-01-11);
> > Mon, 05 Apr 2004 04:05:23 +0100
> > From: root@atomixcreations.net (Cron Daemon)
> > To: root@atomixcreations.net
> > Subject: *****POSSIBLE SPAM***** Cron <ro...@atomixcreations> run-parts
> > /etc/cron.daily
> > Date: Mon, 5 Apr 2004 04:05:23 +0100
> > Message-Id: <20...@atomixcreations.net>
> > X-Spam-Flag: YES
> > X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
> > atomixcreations.net
> > X-Spam-Level: **************************************************
> > X-Spam-Status: Yes, hits=105.5 required=5.0 tests=AWL autolearn=ham
> > version=2.63
> > MIME-Version: 1.0
> > Content-Type: multipart/mixed;
> > boundary="----------=_4070CCF3.6BDDB200" Status:
> >
> > ---
> >
> > Content analysis details: (108.4 points, 5.0 required)
> >
> > pts rule name description
> > ---- ----------------------
> > ------------------------------------------------ --
> > 108 AWL AWL: Auto-whitelist adjustment
> >
> > and
> >
> > Return-path: <ro...@atomixcreations.net>
> > Envelope-to: root@atomixcreations.net
> > Delivery-date: Mon, 05 Apr 2004 04:02:05 +0100
> > Received: from exim by atomixcreations.net with spam-scanned (Exim
> > 4.04)
> > id 1BAKNA-0007zi-00
> > for root@atomixcreations.net; Mon, 05 Apr 2004 04:02:05 +0100
> > Received: from localhost by atomixcreations.net
> > with SpamAssassin (2.63 2004-01-11);
> > Mon, 05 Apr 2004 04:02:05 +0100
> > From: root <ro...@atomixcreations.net>
> > To: root@atomixcreations.net
> > Subject: *****POSSIBLE SPAM***** LogWatch for atomixcreations.net
> > Date: Mon, 5 Apr 2004 04:02:03 +0100
> > Message-Id: <20...@atomixcreations.net>
> > X-Spam-Flag: YES
> > X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
> > atomixcreations.net
> > X-Spam-Level: **************************************************
> > X-Spam-Status: Yes, hits=108.4 required=5.0 tests=AWL autolearn=ham
> > version=2.63
> > MIME-Version: 1.0
> > Content-Type: multipart/mixed;
> > boundary="----------=_4070CC2D.3D4E53A7" Status:
> >
> > ---
> >
> > Content analysis details: (105.5 points, 5.0 required)
> >
> > pts rule name description
> > ---- ----------------------
> > ------------------------------------------------
>
Re: Why are emails from root being tagged as spam?
Posted by Fred <sp...@freddyt.com>.
I see a problem here, the whitelist_from is not taking effect because you
need:
whitelist_from *@atomixcreations.net
The wildcard is important!
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/
810-794-4400
mailto:info@i-is.com
Tom Vivian wrote:
> Below are 2 headers of emails that shouldn't be tagged.
> I have both:
>
> whitelist_from @atomixcreations.net
> trusted_networks 192.168.0/16 127/8
>
> in my /etc/mail/spamassassin/local.cf
>
> Return-path: <ro...@atomixcreations.net>
> Envelope-to: root@atomixcreations.net
> Delivery-date: Mon, 05 Apr 2004 04:05:23 +0100
> Received: from exim by atomixcreations.net with spam-scanned (Exim
> 4.04)
> id 1BAKQN-00082z-00
> for root@atomixcreations.net; Mon, 05 Apr 2004 04:05:23 +0100
> Received: from localhost by atomixcreations.net
> with SpamAssassin (2.63 2004-01-11);
> Mon, 05 Apr 2004 04:05:23 +0100
> From: root@atomixcreations.net (Cron Daemon)
> To: root@atomixcreations.net
> Subject: *****POSSIBLE SPAM***** Cron <ro...@atomixcreations> run-parts
> /etc/cron.daily
> Date: Mon, 5 Apr 2004 04:05:23 +0100
> Message-Id: <20...@atomixcreations.net>
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
> atomixcreations.net
> X-Spam-Level: **************************************************
> X-Spam-Status: Yes, hits=105.5 required=5.0 tests=AWL autolearn=ham
> version=2.63
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----------=_4070CCF3.6BDDB200" Status:
>
> ---
>
> Content analysis details: (108.4 points, 5.0 required)
>
> pts rule name description
> ---- ----------------------
> ------------------------------------------------ --
> 108 AWL AWL: Auto-whitelist adjustment
>
> and
>
> Return-path: <ro...@atomixcreations.net>
> Envelope-to: root@atomixcreations.net
> Delivery-date: Mon, 05 Apr 2004 04:02:05 +0100
> Received: from exim by atomixcreations.net with spam-scanned (Exim
> 4.04)
> id 1BAKNA-0007zi-00
> for root@atomixcreations.net; Mon, 05 Apr 2004 04:02:05 +0100
> Received: from localhost by atomixcreations.net
> with SpamAssassin (2.63 2004-01-11);
> Mon, 05 Apr 2004 04:02:05 +0100
> From: root <ro...@atomixcreations.net>
> To: root@atomixcreations.net
> Subject: *****POSSIBLE SPAM***** LogWatch for atomixcreations.net
> Date: Mon, 5 Apr 2004 04:02:03 +0100
> Message-Id: <20...@atomixcreations.net>
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
> atomixcreations.net
> X-Spam-Level: **************************************************
> X-Spam-Status: Yes, hits=108.4 required=5.0 tests=AWL autolearn=ham
> version=2.63
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----------=_4070CC2D.3D4E53A7" Status:
>
> ---
>
> Content analysis details: (105.5 points, 5.0 required)
>
> pts rule name description
> ---- ----------------------
> ------------------------------------------------