I have a simple tagging question. I searched around, but didn't find a solid answer. We have our mail set to be discarded at a score of 5.0, and it works great. But, we would like to have spam above 3.0 tagged, and looking at the message source, it is, along with the tests that flagged it. Would it be possible to have ****SPAM**** (or something similar) appended to the subject of messages with a score above 3.0, but below 5.0?
Well, it depends on how you are setting it to discard mail over 5.0.
Also, ALL of the following is INVALID if you use MimeDefang, or MailScanner.... Those both handle this stuff internally.
I'm also assuming you're running SA version 2.6 or higher. Some of this might be different for older versions.
If you're just looking for the subject tag, or SA's spam status of Yes as a deletion criteria, then you're going to need to make some changes.
Fundamentally, the only way for SA to tag a message subject is for it to be over SA's spam threshold.
So, what you need to do is drop your threshold to 3.0, and make sure your filter only picks up and deletes messages over 5. You might want to look at the X-Spam-Level header with it's series of stars as a way of picking up what the score is.. 5 or more stars means score > 5.
Sidenote: I'd really think twice about having such a low deletion threshold, but your network is likely very different from mine, so that's your call.