Bug 5936

Summary: spamc -L spam adds from address to autowhitelist
Product: Spamassassin Reporter: michael <mrogers>
Component: spamc/spamdAssignee: SpamAssassin Developer Mailing List <dev>
Status: RESOLVED WORKSFORME    
Severity: major CC: parkerm, sidney
Priority: P5    
Version: 3.2.4   
Target Milestone: Undefined   
Hardware: PC   
OS: Linux   
Whiteboard:

Description michael 2008-07-05 10:28:44 UTC
If I pass a spam message to spamc to learn it as spam "spamc -L spam < spammessage", it adds -50 to the AWL for the senders email address.

It does give the message a BAYES_99 score when testing the result with "spamc -R < spammessage" a second time.

Here are the before and after results:

BEFORE spamc -L spam

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.7 SPF_NEUTRAL            SPF: sender does not match SPF record (neutral)
 2.1 SUBJ_ALL_CAPS          Subject is all capitals
 1.3 MISSING_HEADERS        Missing To: header
-1.1 BAYES_05               BODY: Bayesian spam probability is 1 to 5%
                            [score: 0.0135]
 0.8 MSOE_MID_WRONG_CASE    MSOE_MID_WRONG_CASE
 3.1 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
-1.1 AWL                    AWL: From: address is in the auto white-list

AFTER spamc -L spam

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.7 SPF_NEUTRAL            SPF: sender does not match SPF record (neutral)
 2.1 SUBJ_ALL_CAPS          Subject is all capitals
 1.3 MISSING_HEADERS        Missing To: header
 0.8 MSOE_MID_WRONG_CASE    MSOE_MID_WRONG_CASE
 3.1 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
 -51 AWL                    AWL: From: address is in the auto white-list

thanks.
Comment 1 Karsten Bräckelmann 2009-02-18 15:05:14 UTC
Hmm, can't reproduce with 3.2.5. Michael, can you reliably reproduce anything like your original report? Don't mind the exact numbers.


(In reply to comment #0)
> Here are the before and after results:
> 
> BEFORE spamc -L spam
> -1.1 AWL                    AWL: From: address is in the auto white-list

OK, so the address is in the AWL database already. At least once.

> AFTER spamc -L spam
>  -51 AWL                    AWL: From: address is in the auto white-list

The AWL is a score averager. Since we know the address is already in the database, any additional score is at least -100, not -50. The average then is -50 as seen here.

Any change this has been done *between* these two runs? Any additional commands? Given the score, this smells like a plain --add-to-blacklist anyway.
Comment 2 Sidney Markowitz 2022-04-14 10:15:01 UTC
I'm closing this old issue as an apparent reporter error, can't reproduce.