Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: Correcting poisoned Auto-Whitelist (AWL)

  1. #11
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    someone's notes and modifications: http://mail-archives.apache.org/mod_mbox/spamassassin-dev/200501.mbox/<200501112307.j0BN7JhZ104226@opal.eng.sun.com>
    yes with the <> on the url

    Though it's from '05 so some stuff might already be incorporated in a newer script:
    I found the check_whitelist tool very convenient for examining who had sent me mail and what scores they had earned. But I often found myself wanting
    to study certain individuals and/or domains, and sometimes to use the same as --clean fodder. So I extended the script to understand the new options --addr and --domain.

    I also found the output format a little too rigid for my taste, as I like to pipe the output to sort with k1n, k3n or k5n as an argument, but the '(' / ')' were sometimes interfering, and typing a long sed entry every time was a pain. So I altered the white-space a bit accordingly.
    Last edited by mmorse; 10-19-2007 at 08:35 AM.

  2. #12
    rfoster is offline Active Member
    Join Date
    Aug 2007
    Location
    U.S. Pacific Northwest
    Posts
    25
    Rep Power
    8

    Default

    I could use this functionality (see below) to correct one spammer's AWL scores (which are very negative and completely counter-acting all the good done by spamassassin). Unfortunately, the spamassassin executable doesn't seem to be available in the Zimbra installation. I probably am just missing something silly.

    Quote Originally Posted by mmorse View Post
    While you did say you had a bunch, if you ever wanted to do it for one address it's like:
    spamassassin --remove-addr-from-whitelist user@domain.com
    (Remove the named email address from the automatic whitelist)

  3. #13
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Ya I never got that particular syntax to do anything usefull, but did you see:
    http://spamassassin.apache.org/full/...heck_whitelist & http://mail-archives.apache.org/mod_mbox/spamassassin-dev/200501.mbox/<200501112307.j0BN7JhZ104226@opal.eng.sun.com>

    Dan did you ever try it?

    It'll probably be really long time before it's investigated; but I suppose someone might as well start the RFE for 'including a method for AWL corrections' that doesn't involve a whole wipe (rm -f /opt/zimbra/amavisd/.spamassassin/auto-whitelist*)
    Last edited by mmorse; 10-31-2007 at 01:19 PM.

  4. #14
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    Quote Originally Posted by mmorse View Post
    Ya I never got that particular syntax to do anything usefull, but did you see:
    http://spamassassin.apache.org/full/...heck_whitelist & http://mail-archives.apache.org/mod_mbox/spamassassin-dev/200501.mbox/<200501112307.j0BN7JhZ104226@opal.eng.sun.com>

    Dan did you ever try it?

    It'll probably be really long time before it's investigated; but I suppose someone might as well start the RFE for 'including a method for AWL corrections' that doesn't involve a whole wipe (rm -f /opt/zimbra/amavisd/.spamassassin/auto-whitelist*)
    No Mike, I got overtaken by fiscal-year-end and haven't paid much attention. I did not download those tools though I may try at some point if I get a moment to breathe. . .

    I was actually hoping I had misunderstood something and when rfoster asked the question I hadn't gotten around to asking I was looking forward to your simple response!

  5. #15
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Darn, same here -lol

    Side thought on my factor recommendations thing:
    Wouldn't it be cool if it auto-changed on time since install?
    Quote Originally Posted by mmorse View Post
    So maybe like:
    -use_auto_whitelist 0 for one week so that you work out SA rules as desired (also called sa_auto_whitelist=0)
    -followed by a week of use_auto_whitelist 1 & auto_whitelist_factor 0 (to train the database)
    -then increase the factor to 0.3 for another week (to start using the database)
    -and factor of 0.5 from then on

  6. #16
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    Quote Originally Posted by mmorse View Post
    Darn, same here -lol

    Side thought on my factor recommendations thing:
    Wouldn't it be cool if it auto-changed on time since install?
    Sure, but it'd be even cooler if we could maintain that list from inside the gui!

    Having watched a bunch of email headers (cf. my other posting today on more spam tweaks), I'm increasingly convinced that AWL is only tilting one way for me, which is to allow stuff it shouldn't, not to hurt stuff that would otherwise be desired. So I think I'm gonna change it to maybe 0.1 or something like that so it doesn't disappear completely from the header (and consequently from my memory), and let it be next-to-irrelevant in my spam world.

Page 2 of 2 FirstFirst 12

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •