AWL and FP's....

[Charles Gregory <cg...@hwcn.org>]

Hallo!

Just curious if anyone has ever found a 'clean' way to handle the 'damage' 
done to the AWL when someone's mail is blocked by a false positive, and 
the sender is stupid enough to keep retrying the offending mail?

I would rather not turn off AWL. I like the way it gives a negative score 
bias to frequent correspondents. But is there a (sub)setting to allow me 
to permit the negative bias, but *not* allow it to add a positive one?

And while I'm at it, can anyone verify whether 'constantcontact' is really 
a legit mail service or a spam haven? That's the FP that caused this 
issue....

- Charles

Re: AWL and FP's....

[Michael Scheidell <sc...@secnap.net>]

Charles Gregory wrote:
> Hallo!
>
> Just curious if anyone has ever found a 'clean' way to handle the 
> 'damage' done to the AWL when someone's mail is blocked by a false 
> positive, and the sender is stupid enough to keep retrying the 
> offending mail?
>
>
any manual learning (sa-learn?) should delete bad awl entries.

and constantcontact, has in the past not been as selective with their 
clients as they could be.

Even the most responsive and legit of these services gets a bad client, 
now and again.
> And while I'm at it, can anyone verify whether 'constantcontact' is 
> really a legit mail service or a spam haven? That's the FP that caused 
> this issue....
>
> - Charles

-- 
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
 > *| *SECNAP Network Security Corporation

    * Certified SNORT Integrator
    * 2008-9 Hot Company Award Winner, World Executive Alliance
    * Five-Star Partner Program 2009, VARBusiness
    * Best Anti-Spam Product 2008, Network Products Guide
    * King of Spam Filters, SC Magazine 2008


_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
_________________________________________________________________________

Re: AWL and FP's....

[Jeff Mincy <je...@delphioutpost.com>]

   From: Charles Gregory <cg...@hwcn.org>
   Date: Wed, 22 Apr 2009 15:56:53 -0400 (EDT)
   
   Just curious if anyone has ever found a 'clean' way to handle the 'damage' 
   done to the AWL when someone's mail is blocked by a false positive, and 
   the sender is stupid enough to keep retrying the offending mail?

Meaning that the first message from the sender was incorrectly marked
as spam and AWL then made sure that all subsequent messages from the
same sender were also marked as spam?
   
The easiest way to fix it is to smash the AWL entry with spamassassin
--add-to-whitelist or remove the AWL entry using --remove-from-whitelist.

   I would rather not turn off AWL. I like the way it gives a negative score 
   bias to frequent correspondents. But is there a (sub)setting to allow me 
   to permit the negative bias, but *not* allow it to add a positive one?
   
Nope - the only thing you can do is set the factor which acts on both
positive and negative scores.

   And while I'm at it, can anyone verify whether 'constantcontact' is really 
   a legit mail service or a spam haven? That's the FP that caused this 
   issue....
   
they do email for various organizations.

-jeff