Hello Mark,
thank you for your answer: That is excactly the problem. I do not have different levels set for different users. They are all the same, getting their seetings from a mysql db as described in the READMEs. I just looked a the amavisd log, as you suggested. The problem seems to be the penpal function I introduced, when I needed it for the bounce-kill feature. The one who did get the mail had earlier written a mail to the originator of the mail, that was unfortunately declared spam. Thus the person, who got the mail resulted in fewer points (5.1), but that only counted for him and not the other two, their rating created (8.269) What is weird though,is that it gives the same number of points for both cases (bottom of the lof excerpt, where it says "Passed SPAM" and "Blocked SPAM". I guess this is just an unfortunate event, or is there something I can do about this? I have in the meantime thrown out the FUZZY_OCR check, because it doesn't seem to make much difference at the moment, and I might have had the score set too high. Here is the relevant log: May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) AM.PDP /var/amavis/tmp/afm4MFKfIj030031: <[EMAIL PROTECTED] lpro.com.ua> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) Checking: dgoT8Kh49ZB9 AM.PDP-SOCK [62.64.120.200] <uly [EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) p005 1 Content-Type: multipart/mixed May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) p007 1/1 Content-Type: multipart/alternative May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) p001 1/1/1 Content-Type: text/plain, size: 407 B, name: May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) p002 1/1/2 Content-Type: text/html, size: 4266 B, name: May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) p003 1/2 Content-Type: image/jpeg, size: 199719 B, name : Invoice_2008-82-2_Extermetal.jpg May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) penpals: bonus 3.160, age 2 9:08:27 (205706), SA score 8.269, <[EMAIL PROTECTED]> replying to <[EMAIL PROTECTED]>, ref mail_id: CV++40h2JU8w May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) penpals: prev Subject: WG: FCR for plates, payment May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) penpals: this Subject: invoice for shipment on board of barge 545, ex 20012 May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) PenPalsSavedFromKill 8.269-3.160, <[EMAIL PROTECTED] .ua> -> <[EMAIL PROTECTED]> May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) do_notify_and_quarantine: rec_bl_ccat=(1,1), ccat=(6,0) [EMAIL PROTECTED] May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) SEND via SQL (DBI:mysql:database=mail;host=127.0.0.1;po rt=3306): <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, mai l_id dgoT8Kh49ZB9 May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) SPAM, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED] ahl.com>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, Yes, score=8.269-3.16 tag=3 tag2=6 kill=6 tests=[AWL=-4.229, B AYES_50=0.001, DRUGS_STOCK_MIMEOLE=3.496, FUZZY_OCR=10.000, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1], autolearn=spam, quaranti ne dgoT8Kh49ZB9 (spam-quarantine) May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) SPAM-TAG, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED] tahl.com>, No, score=5.109 tagged_above=3 required=6 tests=[AWL=-4.229, BAYES_50=0.001, DRUGS_STOCK_MIMEOLE=3.496, FUZZY_OCR=10 .000, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) Passed SPAM, AM.PDP-SOCK [62.64.120.200] [85.223.218.20 ] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine: dgoT8Kh49ZB9, Queue-ID: m4MFKfIj030031, Message-ID: <STLP [EMAIL PROTECTED]>, mail_id: dgoT8Kh49ZB9, Hits: 5.109, size: 284290, 6758 ms May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) Blocked SPAM, AM.PDP-SOCK [62.64.120.200] [85.223.218.2 0] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, quarantine: dgoT8Kh49ZB9, Queue-ID: m4MFKfIj030031, Message-ID: <[EMAIL PROTECTED]>, mail_id: dgoT8Kh49ZB9, Hits: 5.109, size: 284290, 6758 ms In any case, thank you for your help. If you find, I could improve the configuration, please let me know. All the best Peter Huetmannsberger, RHCE Linux Administration PS: Sorry about the bad formatting of the logfile excerpt. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/