On Tue, May 12, 2026 at 11:22:08AM +0200, Benoit Panizzon wrote: > So no matter how spamassassin is called, in both cases IMHO it should > get the full text/rfc822 email with header any body and get the same > results.
Agreed. if your mail is indeed in correct format, there are few things that I'd check: - has the MIMEdefang been instructed to reload to pick up new rules? - has the reload succeeded, specifically: - e.g. file permission problem might have "spamassassin -t" running as root succeed, while MIMEdefang running as unprivileged user might fail) - syntax error might case MIMEdefang to abort reloading and use old configuratin - you can check by e.g. adding some other always-hitting rule in same config file and see if that one matches in both cases or also only in cmdline "spamassassin -t" - also, check the logs that MIMEdefang might produce (note: I'm not using MIMEdefang but amavisd, but I'm assuming that most core issues are likely similar) -- Opinions above are GNU-copylefted.
