On Mon, 2005-05-09 at 16:37, Kevin W. Gagel wrote: > I'm using SpamAssassin 3.0.2 with Razor2 (agent 2.61).
Not 2.67? So no whiplash (version 8) signatures... very odd... > > I have a user that has had his email from his home ISP > tagged as spam when he sends to himself at work (here). > Looking at the headers shows that SpamAssassin found the > message listed in Razor2. > > I've taken the actual message and removed the markup from > SpamAssassin and run a razor-check and come up empty. >From the same version? if you are running razor-agents v 2.67 in one spot, then whiplash might be hitting him - he might have a sig line that contains a url that has been reported as spam. To correct that, send a razor-revoke on the message. If everything is running 2.61, then make certain there are no embedded images that he is sending - the 1-pixel gif is a favorite of spammers (and of razor2). Each message part is evaluated separately, so if there are multiple mime attachments, a hit on any one of them will mark the message as spam. > This > manual check says that the message is not listed (with and > without the SA markup). > > Do I need to remove the headers from my internal server > (incoming mail is check and tagged at the gateway and then > sent to the internal where the users get it) or is the check > done only on the body of the message? > No, razor ignores all headers. > If the extra header info (from gateway to internal server) > would not affect the razor2 signature then why is > SpamAssassin finding it listed in Razor2 OR why can't I find > it listed when I run a razor-check against the message? Make certain you really have the same version. The jump to 2.67 was really significant. -- Daniel J McDonald, CCIE #2495 Austin Network Design http://www.austinnetworkdesign.com ------------------------------------------------------- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7393&alloc_id=16281&op=click _______________________________________________ Razor-users mailing list Razor-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/razor-users
