Thank you for responding You were correct it was the size limit that bypassed the scanning
I created a spamc.conf in the spam assassin folder with the “-s option” and
increased the scanning size to avoid bypassing on smaller attachments.
On Feb 7, 2022, at 5:24 PM, David B Funk <dbf...@engineering.uiowa.edu> wrote:
How big was the message? (attached images can be pretty big).
Depending on the "glue" you use to connect your mail MTA to SA, it may have
some kind of size restriction.
For example, the 'spamc' client has a 'max-size' parameter (which defaults to
500KB). Any message larger than that size will not be passed to SA (IE it will
skip scanning).
Does your MTA log the SA processing? Can you see any logged errors associated
with that particular message?
On Mon, 7 Feb 2022, Chad wrote:
> All of the other emails that were sent before and after this particular email
> have the X-Spam-Status and X-spam-Report scoring,
>
> So Spamassassin was running correctly.
>
>
>
> -----Original Message-----
> From: Marc <m...@f1-outsourcing.eu>
> Date: Monday, February 7, 2022 at 1:49 PM
> To: Chad <c...@mercuryemail.net>, "users@spamassassin.apache.org"
> <users@spamassassin.apache.org>
> Subject: RE: Emails from gmail.com bypassing Spamassassin scoring
>
>> I have been getting numerous emails lately from various gmail.com
>> accounts. They are spam or phishing emails and today I got one that
>> had a subject of RECEIPT 5454 and only a JPG image of an invoice.
>> There was no content in the email.
>>
>>
>>
>> It bypassed Spamassassin scoring. Do you know why or what setting I
>> need to set so EVERY email goes through Spamassassin scoring procedures?
>>
>>
>
> I do not see X-Spam headers[1], so your spamassassin was not working?
>
>
> [1]
> X-Spam-Status: No, score=-0.4 required=3.0 tests=ALL_TRUSTED,SPF_NEUTRAL,
> TVD_SPACE_RATIO,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no
> version=3.4.6
> X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
> 4422b522-8a2b-4864-9498-4f2d06aca485
>
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center, 103 S Capitol St.
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
smime.p7s
Description: S/MIME cryptographic signature
