I thought I was careful and deleted all the headers that were added/altered after passing through my server and onto gmail. And I didn't see any erroneous blank lines. Perhaps I didn't do as good as I thought. Anyway, I did try it again, and here are the results:
http://pelorus.org/third_pass_log.txt and here is the message as I passed it through. I guess I should have been doing the old :0c make-a-backup-copy-of-all-messages trick, but I didn't have that one in place. I do now, so if any more get through, I'll be ready. So, here's the message: http://pelorus.org/spammy.txt Thanks for the help! Skip RW-15 wrote: > > On Sun, 5 Jul 2009 16:29:25 -0700 (PDT) > MrGibbage <s...@pelorus.org> wrote: > >> >> What would cause my SA installation to score a message 0 every once >> in a while? Last night I received a spam message in my inbox, which >> is kinda strange since SA is pretty much foolproof for me. Upon >> further investigation, I found out that the message was scored 0 >> --not a single hit on any rules. I then piped the clean message >> through my procmail script again, only to have it hit on a dozen >> rules and be classified as spam. The first time it looks like SA did >> indeed run; it doesn't look like it ran out memory or anything like >> that. What else might I want to look at? >> >> Here are my logs after SA saw the message: >> http://pelorus.org/failed-log.txt <-first pass SA log >> http://pelorus.org/passed-log.txt <- second pass SA log >> >> Here is the full message with headers: >> http://pelorus.org/first_pass_with_markup.txt >> http://pelorus.org/second_pass_with_markup.txt >> >> Remember, the first time it got through and made it to my inbox. The >> second time SA caught it. > > > I'm not sure exactly what you did, but most of the hits on the second > pass seem to to be artifacts of the way the way you fed the original > back-in. The second time around it seems that the original headers were > treated as part of the the body, making it look like an email with no > headers. Presumambly a blank line got prepended somehow. > > -- View this message in context: http://www.nabble.com/SA-scores-zero...-sometimes-tp24347925p24348886.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
