General Question with Whitelist

[dangsite]

I wanted to ask what is the correct behavior for the Whitelisted e-mail addresses.

My observation within my environment:
Currently any email received that appears in the "Waiting (greylist)" and/or received & marked as SPAM, the sender is always added to the Whitelisted e-mail address (which has the URI of https://<fqdn>/sgwi/awl.php?mode=email) and the Whitelisted domains ( which has the URI of https://<fqdn>/sgwi/awl.php?mode=domains ).

The eFa application is catching the correct emails as SPAM -- there is no doubt. The part I am not understanding is why the email will be added to the "Whitelisted" list in the cases the email was marked as SPAM.

Usually once a week I am deleting entries within the Whitelisted lists. In most cases the received emails that are in the quarantine due to Spam Assassin exist in the whitelisted lists.

Look forward to any information that can be shared.

[pdwalker]

look in your /etc/MailScanner/spamassassin.conf - what is the setting for your "use_auto_whitelist" parameter?

Also, what is the setting of /etc/MailScanner/MailScanner.conf "SpamAssassin Auto Whitelist" parameter?

[dangsite]

pdwalker - thank you for the reply post. Sorry for my delay in responding.

For the /etc/MailScanner/spamassassin.conf the "use_auto_whitelist" parameter is using the default value. I had not uncomment the line and setting it to 0.

For the /etc/MailScanner/MailScanner.conf the "SpamAssassin Auto Whitelist" parameter is set to yes.

I did read the commented parts of the configuration file: Is there a way to only whitelist items that are not marked as "clean"; for example Spam or Blacklist.

Look forward to your next reply