On Sun, 14 Feb 2016 12:22:36 +0800 Tino de Bruijn wrote: > Hi, > > I have some trouble filtering my spam, as everything I try from the > commandline works fine (spamc -t < spam.eml , where spam.eml is a > spam message i dragged out of Mail.app and uploaded to the server), > but when delivered to SA by my MTA (Haraka), it gets a way too low > score (11 vs 3.5 respectively). The spamd.log shows that the online > blacklist checks are not run in the last case:
Even without the DNS problem implied by URIBL_BLOCKED, it's fairly common to get a much higher score on a retest. The reason is simply that that new IP addresses and domains take some time to get listed.