It's the filesize. Blank message, with only "Test" in the subject line, nothing in the body. All entries in my /var/log/procmail file contain such a number. I didn't include the number before because of line-wrapping problems.
FWIW, the actual spam flag that works right here is "X-Spam-Flag: YES". Here's the log snippet that caught a and disposed of a test spam message I created and sent to myself: procmail: [26899] Mon Nov 18 21:05:10 2002 procmail: Match on "< 256000" procmail: Executing "spamc" procmail: Match on "^X-Spam-Flag: YES" procmail: Locking "spam.lock" procmail: Assigning "LASTFOLDER=spam" procmail: Opening "spam" procmail: Acquiring kernel-lock procmail: Unlocking "spam.lock" procmail: Notified comsat: "balpert@0:/home/balpert/mail/spam" >From [EMAIL PROTECTED] Mon Nov 18 21:05:09 2002 Subject: [SPAM] Low-rate mortgage offer!!! Folder: spam 3530 Brad ***** >> Folder: /var/spool/mail/balpert >> 1 > ^^^ > > What's the '1' doing there in the last line? Is it a typo or > cut'n'paste error? (in your earlier postings you never quoted that > number) It should be the total size in bytes of the mail that has > been appended to /var/spool/mail/balpert by procmail. > > I must admit I haven't used Spam Assassin before (only looked into > this thread because I know procmail), but would add option --pipe > (or -P) to the procmail recipe: > > :0fw > * < 256000 > | spamassassin --pipe -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list