Mailing List Archive

Whitelist score factor?
Hi!

I am running SA 2.63 on RedHat 8 and I have setup whitelist with score
factor 0.1 BUT now when I receive a message from an address which is in
the whitelist I see score -100.
What am I missing here?

Regards,
Sasa
Re: Whitelist score factor? [ In reply to ]
Sasa Stupar wrote:
> I am running SA 2.63 on RedHat 8 and I have setup whitelist with score
> factor 0.1 BUT now when I receive a message from an address which is in
> the whitelist I see score -100.
> What am I missing here?

That sounds like normal whitelist scoring. I wasn't aware you COULD
adjust it. How did you (attempt to) do so?

I'm leaning away from using white/blacklists because they do swing so
heavily... especially if using AWL.

- Bob
Re: Whitelist score factor? [ In reply to ]
At 05:47 AM 3/8/2004, Sasa Stupar wrote:
>I am running SA 2.63 on RedHat 8 and I have setup whitelist with score
>factor 0.1 BUT now when I receive a message from an address which is in
>the whitelist I see score -100.
>What am I missing here?

the "score factor" is part of the auto-whitelist, which is something
completely different than the static whitelist_from type commands.

If you want to change the score of static whitelists, use a score command
in your local.cf:

score USER_IN_WHITELIST -10


I'd advise reading the Mail::SpamAssassin::Conf page very closely regarding
the "score factor" and read the AWL section of the wiki... keep in mind
that the AWL is completely separate from any static whitelists.

http://wiki.spamassassin.org/w/AutoWhitelist
Re: Whitelist score factor? [ In reply to ]
On Mon, 08 Mar 2004 09:20:12 -0500, Matt Kettler <mkettler@evi-inc.com>
wrote:
>I'd advise reading the Mail::SpamAssassin::Conf page very closely regarding
>the "score factor" and read the AWL section of the wiki... keep in mind
>that the AWL is completely separate from any static whitelists.

I wish this were true. Unfortunately the score of a message added to
the AWL includes the score subtracted/added by the whitelist/blacklist
command. Thus the use of a static whitelist or blacklist affects AWL
quite strongly.

Alan
--
Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html
Re: Whitelist score factor? [ In reply to ]
Alan Baxter wrote:

> [...]
>
> Unfortunately the score of a message added to
>the AWL includes the score subtracted/added by the whitelist/blacklist
>command. Thus the use of a static whitelist or blacklist affects AWL
>quite strongly.
>
>
And the effect may linger long after the white/blacklist is deleted.

- Bob
Re: Whitelist score factor? [ In reply to ]
On Wed, 10 Mar 2004, Bob George wrote:

> Alan Baxter wrote:
>
> > [...]
> >
> > Unfortunately the score of a message added to
> >the AWL includes the score subtracted/added by the whitelist/blacklist
> >command. Thus the use of a static whitelist or blacklist affects AWL
> >quite strongly.
> >
> >
> And the effect may linger long after the white/blacklist is deleted.

I wonder whether the AWL (and please, please let it be renamed!) really should
keep an average of ALL scores ever. Might it be better if it only kept, say,
a moving average of the last 5 scores, or an exponential average? Something
that would smooth out simple bumps, but wouldn't punish a person forever for
one GTUBE (or any other insanely high scoring mail). What I have in mind (not
tested at all, so it might be crazy) would be simply storing the last 5 scores
from that sender, and using their average as the AWL value. If you don't have
5 scores from that user, then you use the current message score for any missing
values (so someone who sends a +9 message followed by a -1 would have their
score adjusted as if their average were 1, instead of -9), allowing the AWL to
provide smaller adjustments until it has enough data to do something
reasonable, while still smoothing large bumps.

Just an idea.
--
Adam Lopresto
http://cec.wustl.edu/~adam/

Sorry about the crayon, they won't let me have anything sharp.
Re: Whitelist score factor? [ In reply to ]
At 11:40 AM 3/10/2004, Adam D. Lopresto wrote:
> Something
>that would smooth out simple bumps, but wouldn't punish a person forever for
>one GTUBE (or any other insanely high scoring mail).

One side-comment..

Be aware that "gtube punishment" is in fact a bug in spamassassin. SA's AWL
is intended to ignore GTUBE, and this was allegedly fixed in the 2.5x
series.. however, somehow the bug crept back in.

It's been reported as a bug in 2.63 and fixed in the 3.0 (formerly known as
2.7) cvs tree:

http://bugzilla.spamassassin.org/show_bug.cgi?id=2898