maybe the problem is qmail-scanner and not spamassassin
my sa_quarantine_over is 0.1 (my $sa_quarantine_over='0.1';)
and qmail-scanner have a line like this:
<snip>
if ($sa_quarantine_over > 0 && ($sa_score - $sa_required_hits) >=
$sa_quarantine_over) {
&debug("SA: seriously spammy - quarantine and don't deliver");
$destring="SPAM";
$quarantine_description="SPAM content refused by this network
($sa_score/$sa_required_hits)";
$quarantine_spam="SA:SPAM-QUARANTINED";
$description .= "\n---spamassassin results ---\n$destring
'$quarantine_description'\n ($sa_comment) found in message $ENV{'TMPDIR'}";
<snip>
5.1 - 5.0 = 0.1
And 0.1 >= $sa_quarantine_over , so don't deliver and quarantine, but
message *was* delivered ..
Maybe this a bug on qmail-scanner (and not spamassasin)...
Rejaine Monteiro escreveu:
Matus UHLAR - fantomas escreveu:
Why do you think it bypassed spamassassin? The whole fact the spam was
tagged means it did NOT bypass it, don't you think?
Because I received this email in my mailbox (and many others like
this) , so the spam was not blocked by spamassasin, although to
receive score 5.1 (required 5.0)
I see no X-Spam-Version, maybe it was scored by SA on other machine.
But, always, it's not spamassassin question why some mail are not
passsed
through it...
I did not send the complete header of the message, therefore it did
not appear the SA version.
My intention was to only show that the message had score enough to be
blocked, however it was delivered (not blocked)
He follows all header below (I modified some confidential information) :
Received: (qmail 4400 invoked by alias); 3 Sep 2008 08:32:21 -0300
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 4371 invoked by uid 368); 3 Sep 2008 08:32:21 -0300
Received: from 209.85.217.31 by server1 (envelope-from
<[EMAIL PROTECTED]>, uid 365) with qmail-scanner-2.01
(clamdscan: 0.93/8144. spamassassin: 3.2.5.
Clear:RC:0(209.85.217.31):SA:1(5.1/5.0):.
Processed in 2.490743 secs); 03 Sep 2008 11:32:21 -0000
X-Spam-Status: Yes, score=5.1 required=5.0
X-Spam-Level: +++++
Received: from mail-gx0-f31.google.com (209.85.217.31)
by mailserver.mydomain.com with SMTP; 3 Sep 2008 08:32:19 -0300
Received-SPF: pass (mailserver.mydomain.com: SPF record at
_spf.google.com designates 209.85.217.31 as permitted sender)
Received: by gxk12 with SMTP id 12so2889720gxk.18
for <[EMAIL PROTECTED]>; Wed, 03 Sep 2008 04:32:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:message-id:date:from:to
:subject:in-reply-to:mime-version:content-type:references;
bh=coZ1EmMjtIS0cmUKIQXRvZC31Xpo+lwlfWJOdLjsVZQ=;
b=NmZuyJkV18ruiec999Su1vuQO5NH4xGJRK2VOF9gYqb1pH4oGTPBvr14AYHiI13f8v
wEIeh140B1OfNKMDe2129sClZVdGtOhZPtf7SATI1/79AxBQ2b/vYb+DAuekl/N04xie
cyobOumkw0kMyGiusVZcmtiBvAuJ51TsGtgCQ=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=message-id:date:from:to:subject:in-reply-to:mime-version
:content-type:references;
b=hyah72fhk0lmrwpOG9cXDT2K93HGA02C5vy7GKaLjnlCcBmOiRYi9tbttKQ3qt/hKf
c7YAjfUmM7p9UYgqt7YY9ePmK334WNilEo34H8hY10bSe/LwGaXU1N5D6xzWvU07kL6u
10qNGdhMCUjrd+MD5lWg7kbRX1c/ZJW3hOZNw=
Received: by 10.142.180.11 with SMTP id
c11mr2999448wff.113.1220440859878;
Wed, 03 Sep 2008 04:20:59 -0700 (PDT)
Received: by 10.142.154.1 with HTTP; Wed, 3 Sep 2008 04:20:59 -0700 (PDT)
Message-ID: <[EMAIL PROTECTED]>
Date: Wed, 3 Sep 2008 08:20:59 -0300
From: "User Sender" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Nova modalidade de FURTO DE DIESEL!
In-Reply-To:
<[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_25106_5226581.1220440859861"
References: <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
