On Wed, 25 Jan 2017 10:48:29 -0500 Ruga wrote: > SA runs as follows. > > master.cf, last line of section smtp: > > -o content_filter=spamcheck > > spamcheck unix - n n - 10 pipe > flags=Rq > user=spamd > argv=/usr[/sbin/spamc](http://org.OpenServer/share/spamd/bin/spamc) > --dest=127.0.0.1 --port=783 --filter-retries=3 --filter-retry-sleep=2 > --headers > --pipe-to /usr[/sbin/sendmail](http://org.OpenServer/port-465/sbin/sendmail) > -G -i -f ${sender} -- ${recipient} > >.... > > Why SA accepts the third-party X-Spam header instead of producing its > own?
Probably what's happening is that these are emails over 500 kB which by default are just passed through by spamc without sending them to spamd. If they don't get sent to spamd the existing SA headers don't get stripped. You can to set the -s parameter on spamc to something larger that the largest spam you want to filter.
