So looking again, its actually looks like I just have something very broken. Here“s a log of a spam mail with no spam score:
2010-06-02 10:10:08 [70746] 1OJjxf-000IP4-Cm <= [email protected] H=(1x1.cz) [87.236.199.164]:37410 I=[89.21.28.37]:25 P=esmtp S=3670 T="NOTIFICATION FOR RELEASE OF $10.5M" from <[email protected]> for [email protected] 2010-06-02 10:10:08 [70746] 1OJjxf-000IP4-Cm no immediate delivery: load average 6.13 2010-06-02 10:20:13 [71971] 1OJjxf-000IP4-Cm => a.smith <[email protected]> F=<[email protected]> P=<[email protected]> R=spamcheck T=spamcheck_pipe S=3741 QT=10m6s DT=2s 2010-06-02 10:20:13 [71971] 1OJjxf-000IP4-Cm Completed QT=10m6s 2010-06-02 10:20:13 [71973] 1OJk7Q-000Iir-9t <= [email protected] U=mailnull P=spam-scannedukgsa S=3927 T="NOTIFICATION FOR RELEASE OF $10.5M" from <[email protected]> for [email protected] 2010-06-02 10:20:13 [71973] 1OJk7Q-000Iir-9t no immediate delivery: load average 6.60 2010-06-02 10:31:55 [73581] 1OJk7Q-000Iir-9t => a.smith <[email protected]> F=<[email protected]> P=<[email protected]> R=virtual_localuser T=virtual_localdelivery S=4044 QT=11m43s DT=0s 2010-06-02 10:31:55 [73581] 1OJk7Q-000Iir-9t Completed QT=11m43s Its not listed anywhere in the spamassassin logs and has no spam score etc. However you can clearly see its being recieved via SMTP, passed to the spamcheck_pipe and then mailnull feeds it back in with the "P=spam-scannedukgsa" that was confusing me. So Im not sure how its being passed out via the spamcheck_pipe and back in again without appearing in the spamassassin logs. -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
