On 8/12/2014 6:31 AM, matth wrote:
Hello All,
Please have a look at the email below: in the content analysis report (in
the body) the spam score appears as 5.1 points. The email is correctly
identified as spam, the subject line changed to include "*****SPAM*****".
However, in the email headers the score appears as 0.001, message is not
marked as spam, and even considered a good example of ham! (autolearn=ham).
I really can't understand what's going on... would appreciate any
assistance.
Double processing. The first pass through SA marked it as spam and
added the content analysis you see. This modified message then passed
through SA again (either the same or a different instance) which now
sees it as ham. It cleared out the original X-Spam headers and replaced
them with its own.
To fix the problem, check your mail path and make sure email is not
being scanned twice.
--
Bowe
