How big was the message? (attached images can be pretty big).
Depending on the "glue" you use to connect your mail MTA to SA, it may have some
kind of size restriction.
For example, the 'spamc' client has a 'max-size' parameter (which defaults to
500KB). Any message larger than that size will not be passed to SA (IE it will
skip scanning).
Does your MTA log the SA processing? Can you see any logged errors associated
with that particular message?
On Mon, 7 Feb 2022, Chad wrote:
All of the other emails that were sent before and after this particular email
have the X-Spam-Status and X-spam-Report scoring,
So Spamassassin was running correctly.
-----Original Message-----
From: Marc <[email protected]>
Date: Monday, February 7, 2022 at 1:49 PM
To: Chad <[email protected]>, "[email protected]"
<[email protected]>
Subject: RE: Emails from gmail.com bypassing Spamassassin scoring
I have been getting numerous emails lately from various gmail.com
accounts. They are spam or phishing emails and today I got one that
had a subject of RECEIPT 5454 and only a JPG image of an invoice.
There was no content in the email.
It bypassed Spamassassin scoring. Do you know why or what setting I
need to set so EVERY email goes through Spamassassin scoring procedures?
I do not see X-Spam headers[1], so your spamassassin was not working?
[1]
X-Spam-Status: No, score=-0.4 required=3.0 tests=ALL_TRUSTED,SPF_NEUTRAL,
TVD_SPACE_RATIO,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no
version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
4422b522-8a2b-4864-9498-4f2d06aca485
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center, 103 S Capitol St.
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
