Thanks for your replay. spamassassin --lint says nothing spamassassin -D [19740] dbg: logger: adding facilities: all [19740] dbg: logger: logging level is DBG [19740] dbg: generic: SpamAssassin version 3.1.9 [19740] dbg: config: score set 0 chosen. [19740] dbg: util: running in taint mode? yes [19740] dbg: util: taint mode: deleting unsafe environment variables, resetting PATH [19740] dbg: util: PATH included '/usr/kerberos/sbin', keeping [19740] dbg: util: PATH included '/usr/kerberos/bin', keeping [19740] dbg: util: PATH included '/usr/local/sbin', keeping [19740] dbg: util: PATH included '/usr/local/bin', keeping [19740] dbg: util: PATH included '/sbin', keeping [19740] dbg: util: PATH included '/bin', keeping [19740] dbg: util: PATH included '/usr/sbin', keeping [19740] dbg: util: PATH included '/usr/bin', keeping [19740] dbg: util: PATH included '/root/bin', which doesn't exist, dropping [19740] dbg: util: final PATH set to: /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin [19740] dbg: message: ---- MIME PARSER START ---- [19740] dbg: message: main message type: text/plain [19740] dbg: message: parsing normal part [19740] dbg: message: added part, type: text/plain [19740] dbg: message: ---- MIME PARSER END ---- [19740] dbg: dns: is Net::DNS::Resolver available? yes [19740] dbg: dns: Net::DNS version: 0.59
spamassassin -t message says: 1.7 SUBJECT_ENCODED_TWICE Subject: MIME encoded twice 3.5 SUBJ_RUSS_CHAR has Russian char encoding 0.1 ESET_SP marked by Eset 2.2 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP) 3.8 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 1.5 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.0 HTML_MESSAGE BODY: HTML included in message 3.0 BAYES_95 BODY: Bayesian spam probability is 95 to 99% [score: 0.9761] 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [84.126.250.89 listed in dnsbl.sorbs.net] 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?84.126.250.89>] 3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [84.126.250.89 listed in sbl-xbl.spamhaus.org] It works. But the other messages have not "0.1 ESET_SP marked by Eset" in header. Is it possible that this rule works but it isn`t written in header? Michael Scheidell wrote: > > >> From: mezcal <[EMAIL PROTECTED]> >> Date: Tue, 12 Aug 2008 00:22:55 -0700 (PDT) >> To: <users@spamassassin.apache.org> >> Subject: Add header rule problem >> >> >> Hello, >> I have been trying to add simple rule. >> # eset >> header ESET_SP X-Eset-AntiSpam =~ /^SPAM/ >> describe ESET_SP Marked by Eset >> score ESET_SP 0.1 > > > Looks ok what does lint say? > When you run spamassassin on that message with debug, what does it day? > Also, don't do both at the same time. > > > -- > Michael Scheidell, CTO >>|SECNAP Network Security > Winner 2008 Network Products Guide Hot Companies > FreeBSD SpamAssassin Ports maintainer > > _________________________________________________________________________ > This email has been scanned and certified safe by SpammerTrap(r). > For Information please see http://www.spammertrap.com > _________________________________________________________________________ > > -- View this message in context: http://www.nabble.com/Add-header-rule-problem-tp18939249p18940151.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.