It appears to me that MIME parts containing nothing, are being marked spam. I have attached the message in question, after 'unix2dos'ing it. The results are below. (razor-check -lm 4 -d)
Razor-Log: No /etc/razor/razor-agent.conf found, skipping. Razor-Log: No razor-agent.conf found, using defaults. Sep 20 10:43:01.001317 check[21952]: [ 1] [bootup] Logging initiated LogDebugLevel=9 to stdout Sep 20 10:43:01.001981 check[21952]: [ 5] computed razorhome=/etc/razor, conf=, ident=/etc/razor/identity Sep 20 10:43:01.002098 check[21952]: [ 2] Razor-Agents v2.14 starting razor-check -home=/etc/razor -d -lm 4 Sep 20 10:43:01.094002 check[21952]: [ 9] uname -a: Linux qmail.mckee.com 2.4.8-34.1mdk #1 Mon Nov 19 12:40:39 MST 2001 i686 unknown Sep 20 10:43:01.094326 check[21952]: [ 8] reading mbox formatted mail from <stdin> Sep 20 10:43:01.094663 check[21952]: [ 6] read 1 mail Sep 20 10:43:01.095002 check[21952]: [ 8] Client supported_engines: 1 2 3 4 Sep 20 10:43:01.096190 check[21952]: [ 8] prep_mail done: mail 1 headers=813, mime0=126, mime1=583 Sep 20 10:43:01.096541 check[21952]: [ 6] skipping whitelist file (empty?): /etc/razor/razor-whitelist Sep 20 10:43:01.096997 check[21952]: [ 5] read_file: 1 items read from /etc/razor/servers.discovery.lst Sep 20 10:43:01.097357 check[21952]: [ 5] read_file: 1 items read from /etc/razor/servers.nomination.lst Sep 20 10:43:01.097675 check[21952]: [ 5] read_file: 2 items read from /etc/razor/servers.catalogue.lst Sep 20 10:43:01.098143 check[21952]: [ 9] Assigning defaults to honor.cloudmark.com Sep 20 10:43:01.098373 check[21952]: [ 9] Assigning defaults to truth.cloudmark.com Sep 20 10:43:01.098588 check[21952]: [ 9] Assigning defaults to fire.cloudmark.com Sep 20 10:43:01.099514 check[21952]: [ 5] read_file: 11 items read from /etc/razor/server.truth.cloudmark.com.conf Sep 20 10:43:01.100156 check[21952]: [ 5] read_file: 11 items read from /etc/razor/server.fire.cloudmark.com.conf Sep 20 10:43:01.100799 check[21952]: [ 5] read_file: 11 items read from /etc/razor/server.apt.cloudmark.com.conf Sep 20 10:43:01.101734 check[21952]: [ 5] 142489 seconds before closest server discovery Sep 20 10:43:01.102039 check[21952]: [ 6] truth.cloudmark.com is a Catalogue Server srl 60; computed min_cf=1, Server se: 0B Sep 20 10:43:01.102308 check[21952]: [ 8] Computed supported_engines: 1 2 4 Sep 20 10:43:01.102538 check[21952]: [ 8] Using next closest server truth.cloudmark.com:2703, cached info srl 60 Sep 20 10:43:01.102735 check[21952]: [ 8] mail 1 Subject: CP NOTIFICATION MCKEE FOODS CORP Sep 20 10:43:01.104412 check[21952]: [ 6] preproc: mail 1.0 went from 126 bytes to 88 Sep 20 10:43:01.105176 check[21952]: [ 6] preproc: mail 1.1 went from 583 bytes to 337 Sep 20 10:43:01.105303 check[21952]: [ 6] computing sigs for mail 1.0, len 88 Sep 20 10:43:01.108173 check[21952]: [ 6] computing sigs for mail 1.1, len 337 Sep 20 10:43:01.110822 check[21952]: [ 5] Connecting to truth.cloudmark.com ... Sep 20 10:43:01.766688 check[21952]: [ 8] Connection established Sep 20 10:43:01.766929 check[21952]: [ 4] truth.cloudmark.com >> 29 server greeting: sn=C&srl=60&ep4=7542-10&a=l Sep 20 10:43:01.767348 check[21952]: [ 6] truth.cloudmark.com is a Catalogue Server srl 60; computed min_cf=1, Server se: 0B Sep 20 10:43:01.767594 check[21952]: [ 8] Computed supported_engines: 1 2 4 Sep 20 10:43:01.767906 check[21952]: [ 8] mail 1.0 e2 sig: 07wQhHuhGDbdVujlzqQfXfPexWEA Sep 20 10:43:01.768052 check[21952]: [ 8] mail 1.0 e4 sig: 07wQhHuhGDbdVujlzqQfXfPexWEA Sep 20 10:43:01.768190 check[21952]: [ 8] mail 1.1 e2 sig: -aURQlClmrJ4Bq-FcZrptf8qeQMA Sep 20 10:43:01.768340 check[21952]: [ 8] mail 1.1 e4 sig: ZAhgGD41CSDVKNwqDHKkHGMBjcgA Sep 20 10:43:01.768535 check[21952]: [ 8] preparing 5 queries Sep 20 10:43:01.769138 check[21952]: [ 8] sending 1 batches Sep 20 10:43:01.769441 check[21952]: [ 4] truth.cloudmark.com << 228 Sep 20 10:43:01.769536 check[21952]: [ 6] -a=c&e=1&s=Ne5BKV8aeaBFBx3phSkj4zDnl3oA a=c&e=2&s=07wQhHuhGDbdVujlzqQfXfPexWEA a=c&e=4&ep4=7542-10&s=07wQhHuhGDbdVujlzqQfXfPexWEA a=c&e=2&s=-aURQlClmrJ4Bq-FcZrptf8qeQMA a=c&e=4&ep4=7542-10&s=ZAhgGD41CSDVKNwqDHKkHGMBjcgA . Sep 20 10:43:02.278260 check[21952]: [ 4] truth.cloudmark.com >> 41 Sep 20 10:43:02.278414 check[21952]: [ 6] response to sent.1 -p=0 cf=45&p=1 cf=45&p=1 p=0 p=0 . Sep 20 10:43:02.279253 check[21952]: [ 6] mail 1 e=1 sig=Ne5BKV8aeaBFBx3phSkj4zDnl3oA: sig not found. Sep 20 10:43:02.279454 check[21952]: [ 6] mail 1.0 e=2 sig=07wQhHuhGDbdVujlzqQfXfPexWEA: Is spam: cf 45 >= min_cf 1 Sep 20 10:43:02.279570 check[21952]: [ 6] mail 1.0 e=4 sig=07wQhHuhGDbdVujlzqQfXfPexWEA: Is spam: cf 45 >= min_cf 1 Sep 20 10:43:02.279685 check[21952]: [ 6] mail 1.1 e=2 sig=-aURQlClmrJ4Bq-FcZrptf8qeQMA: sig not found. Sep 20 10:43:02.279913 check[21952]: [ 6] mail 1.1 e=4 sig=ZAhgGD41CSDVKNwqDHKkHGMBjcgA: sig not found. Sep 20 10:43:02.280080 check[21952]: [ 7] method 4: mail 1.0: no-contention part, spam=2 Sep 20 10:43:02.280172 check[21952]: [ 7] method 4: mail 1.1: no-contention part, spam=0 Sep 20 10:43:02.280252 check[21952]: [ 7] method 4: mail 1: a non-contention part was spam, mail spam Sep 20 10:43:02.280333 check[21952]: [ 3] mail 1 is known spam. Sep 20 10:43:02.280446 check[21952]: [ 5] disconnecting from server truth.cloudmark.com Sep 20 10:43:02.280678 check[21952]: [ 4] truth.cloudmark.com << 5 Sep 20 10:43:02.280759 check[21952]: [ 6] a=q Sep 20 10:43:02.281059 check[21952]: [ 8] razor-check finished successfully.
>From [EMAIL PROTECTED] Fri Sep 20 11:02:48 2002 Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 15982 invoked from network); 20 Sep 2002 11:02:48 -0000 Received: from unknown (HELO TENFOUR) (208.29.20.80) by 10.97.5.1 with SMTP; 20 Sep 2002 11:02:45 -0000 Message-Id: <[EMAIL PROTECTED]> From: [EMAIL PROTECTED] Date: Fri, 20 Sep 2002 6:02:29 -0500 To: <[EMAIL PROTECTED]> Subject: CP NOTIFICATION MCKEE FOODS CORP - Jammed: [EMAIL PROTECTED] MIME-version: 1.0 Content-Type: multipart/mixed; boundary="TFS-with-MIME-and-DIME" X-Mailer: TFS Secure Messaging /222000000/0/222002426/222200323/221130435/ X-Mailer: Version 4.6 Build 116 Envelope-Recipient: [EMAIL PROTECTED] SJ-Tracking-ID: 15863 SJ-Filter-Results: bbjR-tl Status: RO Message is sent with MIME. Attachments are base64 encoded --TFS-with-MIME-and-DIME Content-Type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: quoted-printable --TFS-with-MIME-and-DIME Content-Type: APPLICATION/MSWORD; name="MCSRepP.doc" Content-transfer-encoding: base64 e1xydGYxXGFuc2kgXGRlZmYwXGRlZmxhbmcxMDMze1xmb250dGJse1xmMFxm IFxmMCBcZnMxNiBcY2YxICAgICAgKENPTlNJR05PUiBPUiBDT05TSUdORUUp DQp9XHBhciBccGFyZCBcdHgzNntcdGFiIFxmMCBcZnMxNiBcY2YxIC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfVxwYXIgXHBhcmQgDQpc dHgzNntcdGFiIFxmMCBcZnMxNiBcY2YxICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfVxwYXIgfQ== --TFS-with-MIME-and-DIME--
