On Mon, 14 Jun 2010, dannoz wrote:
>
> SA is correctly assigning a high score to an email (Content analysis details:
> (12.0 points, 3.5 required)) but the X-Spam-Status header reads: No,
> score=0.0 required=3.5 tests=HTML_MESSAGE,MIME_BASE64_TEXT,
> MIME_QP_LONG_LINE,NO_RELAYS,T_HTML_ATTACH autolearn=unavailable
> version=3.3.1... any hints?
>
> ---- Email ----
> Subject:
[snip..]
Looks like that message got passed thru SA twice, first time thru
a system that was conf'ed to do the "report-safe" processing
so it wrapped the spam into a MIME attachment, the second time thu
(or thru a different instance of SA) only saw the headers from the
MIME wrapping and decided that it was a ham message.
examine your mail flow carefully to see if there's any chance
it got SA'ed twice.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
