Spam from own address gets -999

[Fbarajas]

Hi! Some of my WHM/Cpanel hosted costumers are complaining of spam, that apparently comes from their own e-mail address. Since their own address is in spamassassins whitelist, they come tagged as no spam. For example:

To: <cargomex@somedomain.com.mx>
Subject: Age doesn't have to make you flaccid
From: <cargomex@somedomain.com.mx>
MIME-Version: 1.0
Content-Type: text/html
X-Spam-Status: No, score=-100.0
X-Spam-Score: -999
X-Spam-Bar: ---------------------------------------------------
X-Spam-Flag: NO

What can I do to stop that?

Thanks!

[amccoy]

i am experiencing similar problems although i will not quote the content of the emails. solution would be great

[sparek-3]

Do the users have their own e-mail addresses whitelisted in SpamAssassin?

[Fbarajas]

Originally Posted by sparek-3

Do the users have their own e-mail addresses whitelisted in SpamAssassin?

How can I check that as root? My customer is not computer savvy...

[MaestriaNick]

you can access his cpanel from your whm. there in his cpanel, you can check the spamassassin settings.
in the backend, the files will be in /home/username/.spamassassin folder .

[SageBrian]

Originally Posted by sparek-3

Do the users have their own e-mail addresses whitelisted in SpamAssassin?

I just had this issue recently. Seems the spammers are taking advantage of the fact that some people whitelist themselves.

Solution - don't whitelist yourself.

For the clients in question with me, they had whitelisted themselves because it was important for them to not have their 'joke forwards' blocked as spam. They didn't understand that some of those stupid forwards look very much like spam to the filters.

So the question this week was, what is more important? Sending jokes and junk? or blocking spam?

[sparek-3]

Indeed. I might even go so far as to recommend blacklisting messages from your own e-mail address. If you are not automatically deleting spamassassin marked messages, then if you send yourself a message it will get flagged as spam, but you should know when you send yourself an e-mail and you can pick it out of the spam folder.

[ebizindia]

Several of my clients are facing this problem. While it sounds great to bypass the main issue and discuss auxiliary issues, all sufferers (like me) would sincerely appreciate if a proper solution was discussed.

note: Please understand that I am not blasting people who offer precious help by using up their valuable time. We have sincere appreciation for your gesture. I am just suggesting we may stick to basics and save time for everyone.

Here are some relevant facts:

1. I am not sure how one can blacklist or whitelist oneself. Spamassassin settings done through cpanel apply to the whole domain. Can you please elaborate?

2. Can you suggest local.cf settings (for spamassassin rules) where I can mark as spam, emails sent from a user to same user? I would prefer a setting where the email is marked as spam only if sent to myself as the single recipient. If there are multiple recipients including myself, that should be Ok.