In message <20220215152817.3744f22...@orac.inputplus.co.uk>, Ralph Corderoy writes: > >Picking on the simplest problem first, I'm not aware of this behaviour >being per folder so I can't explain that unless the +inbox message >doesn't have a x-spam-report field whereas the +nmh one does. > >With the current message in each folder set appropriately, what does >this give? > > egrep -Him1 '^$|x-spam-report:' `mhpath +inbox .` > anno -list -number -component x-spam-report +inbox . > > egrep -Him1 '^$|x-spam-report:' `mhpath +nmh .` > anno -list -number -component x-spam-report +nmh . > Mr Corderoy - I replied to this message the day I received it. However, since I do not see my cc in the mailing list I assume something went wrong and you never got it.
As requested: /home/slaurel$ folder +inbox inbox+ has 17 messages (1-20); cur=2; (others). /home/slaurel$ egrep -Him1 '^$|x-spam-report:' `mhpath +inbox .` /home/slaurel/Mail/inbox/2:X-Spam-Report: /home/slaurel$ anno -list -number -component x-spam-report +inbox . 1 malware * 0.0 TXREP TXREP: Score normalizing based on sender's reputation /home/slaurel$ folder +nmh nmh+ has 118 messages (1-118); cur=118. /home/slaurel$ egrep -Him1 '^$|x-spam-report:' `mhpath +nmh .` /home/slaurel/Mail/nmh/118:X-Spam-Report: /home/slaurel$ anno -list -number -component x-spam-report +nmh . 1 * -2.5 RCVD_IN_HOSTKARMA_W RBL: Sender listed in HOSTKARMA-WHITE * [209.51.188.17 listed in hostkarma.junkemailfilter.com] * -0.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0054] * 0.1 CK_NAIVER_NO_DNS At least one sender has no verified rDNS * (postfix only) * 0.0 FORWARD_RELAY Appears to be relayed through list or forwarding * 0.6 KAM_COUK Scoring .co.uk emails higher due to poor registry * security. * -0.0 SPF_PASS SPF: sender matches SPF record * -0.0 SPF_HELO_PASS SPF: HELO matches SPF record * 0.0 ENV_FROM_DIFF0 Envelope From differs from from (eg list) * 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level * mail domains are different * 0.1 CK_KARD_SIZE short, card virus size - avoid matches in long * text * 0.0 CK_419SIZE typical 419 size - avoid matches in long text * 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict * Alignment * -0.0 T_SCC_BODY_TEXT_LINE No description available. * -0.1 AM_TRUNCATED Compensate on large message for misfiring rules * -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list * manager * 0.1 TXREP TXREP: Score normalizing based on sender's reputation /home/slaurel$