> Perhaps there's something in amavisd-new that can't cope with the > dkim headers and has done something that breaks SA's header parsing. > This wouldn't necessarily show-up in the delivered email.
Indeed. amavisd+SA says: X-Spam-Status: Yes, score=5.763 tagged_above=2 required=4 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, EMPTY_MESSAGE=2.32, MISSING_DATE=1.36, MISSING_FROM=1, MISSING_HEADERS=1.021, MISSING_MID=0.497, MISSING_SUBJECT=1.799, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, TXREP=-0.842, CRM114.UNSURE(-2.55)=0.510] autolearn=no autolearn_force=no while piping the mail through spamassassin -D says: X-Spam-Status: No, score=-1.6 required=5.0 tests=BAYES_00,DKIM_SIGNED, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS, RP_MATCHES_RCVD,SPF_PASS,T_DKIM_INVALID shortcircuit=no autolearn=no autolearn_force=no version=3.4.1 -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebra...@charite.de Campus Benjamin Franklin https://www.charite.de Hindenburgdamm 30, 12203 Berlin Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155