> I recently had an email message blocked that I'm confused on. Initially > we had thought that it was blocked because of the .docx attachment, but > when we checked it was blocked as spam, not as a banned file. Examining > the headers showed the following line for X-Spam-Status. All triggered > rules should cause a score of -1.44, which shows, but then there is a +40 > appended after that indicating a higher score. What would cause this > score modification? > > Yes, score=-1.44+40 tag=-999 tag2=5 kill=5 tests=[ALL_TRUSTED=-1.44] > What version of amavisd? This MIGHT be the bouncekiller feature.
Newer version of amavisd shows an 'amboost' to identify it. You using any sane security rules that add points based on clamav rules? -- Michael Scheidell, CTO >|SECNAP Network Security Finalist 2009 Network Products Guide Hot Companies FreeBSD SpamAssassin Ports maintainer _________________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ _________________________________________________________________________ ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
