On Thu, 2008-10-23 at 10:27 -0700, mathiasadsl wrote:
> I'm trying hard to make my whitelist_from work.
> I want to whitelist my own domain (i know... it can be dangerous but it's
> for testing purpose).


Yes, for production you should use whitelist_from_rcvd instead, if there
is a need for white-listing at all. Spammers like to pretend they are
you.
http://wiki.apache.org/spamassassin/...stingEverybody

Also have a look here:
http://spamassassin.apache.org/full/...cklist_options


> This is my local.cf :
> # These values can be overridden by editing ~/.spamassassin/user_prefs.cf

^^^^^^^^^^^^^
It's user_prefs actually.

> # (see spamassassin(1) for details)
> # These should be safe assumptions and allow for simple visual sifting
> # without risking lost emails.
>
> required_hits 5
> report_safe 0
> rewrite_header subject [SPAM]
>
> report_safe 0
> header DAEMON Subject =~ /DAEMON/
> score DAEMON 5
> whitelist_from *@group-riget.com
> whitelist_from *@lnxgw.group-riget.com
> whitelist_from *.lnxgw.group-riget.com



> I forward (througt postfix, every "SPAM" tagged email in a specific mailbox
> "spambox", it's working perfecly).


Looks like it doesn't. Rather than filtering based on the Subject,
I'd use a more reliable header added by SpamAssassin.


> This is an example of unormaly tagged email:
>
> Return-Path:
> X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
> lnxgw.group-riget.com
> X-Spam-Level:
> X-Spam-Status: No, score=-96.7 required=5.0 tests=AWL,DNS_FROM_SECURITYSAGE,

^^^^^^^^^^^^^^^^^^^^^
That RBL is in-operational for a while. They list the universe so that
people stop querying their zones. You'll get that hit for each and every
message.

Since you're using 3.2.3, this tells me you are not using sa-update.
This rule has been removed. I strongly suggest you update your rules.
http://wiki.apache.org/spamassassin/RuleUpdates

> DRUGS_STOCK_MIMEOLE,HTML_MESSAGE,RDNS_NONE,USER_IN _WHITELIST autolearn=no

^^^^^^^^^^^^^^^^^
Obviously, your whitelist_from setting DOES work.

> version=3.2.3
> X-Original-To: jerome.claveyrolas@group-riget.com
> Delivered-To: spambox@lnxgw.group-riget.com
> Received: from pc1469 (unknown [192.9.203.23])
> by lnxgw.group-riget.com (Postfix) with ESMTP id 8F835DA4997
> for ; Thu, 23 Oct 2008 10:49:16
> +0200 (CEST)
> From: "Slicra"
> To: "'Jerome claveyrolas'"
> Subject: TR: [SPAM] Devis


> What's wrong with my whitelist????
> Even if i add only one address (user@domain.com), spamassassin tag it!


Hmm, no -- I don't use that ghastly Subject munging, but I am rather
positive that the above is NOT done by YOUR SpamAssassin. Have a look at
the Subject header. The "tag" is pre-pended by some strange "TR:". This
has not been added by your SpamAssassin.

guenther


--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a \x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}