The other thing that makes it look like my system is the X-Spam-Prev-Subject: Court of Appeal Judgments to be filed
The message is not passing through any internet mail servers, just between two separate departments.
On 4/20/06, Matt Kettler <[EMAIL PROTECTED]> wrote:
Paul Dulaba wrote:
> Just upgraded to SA 3.1 from 3.04. Running on SLES 9. I have a couple
> examples of a message that SA scores as Ham, but that still got the
> Subject line re-written:
Any chance it got scanned by two different copies of SA? Including the sending side?
If a second SA scans a message it will over-write the X-Span-Status of the
previous one. However, it won't change the subject line.
It's obvious from the message below that "courtservices" did not belive the
message was spam, but that doesn't mean some other mailserver could not have
added the **SPAM** TAG.
>
> ==================================================================
> From: "Court of Appeal Distribution" < [EMAIL PROTECTED]
> <mailto:[EMAIL PROTECTED]>>
> To: < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
> Subject: **SPAM** Court of Appeal Judgments to be filed
> Date: Tue, 18 Apr 2006 16:03:06 -0600
> Message-Id: < [EMAIL PROTECTED]
> <mailto:[EMAIL PROTECTED] >>
> MIME-Version: 1.0
> Content-Type: text/plain; charset="iso-8859-1"
> X-Mailer: Microsoft CDO for Windows 2000
> Thread-Index: AcZjM97YUwKk+JHyQr+FfAtygvvoeQ==
> Content-Class: urn:content-classes:message
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
> X-Spam-Prev-Subject: Court of Appeal Judgments to be filed
> Content-Transfer-Encoding: quoted-printable
> X-Encoded: Changed encoding from 8bit for 7bit transmission
> X-MIME-Autoconverted: from quoted-printable to 8bit by cnst.gov.ab.ca
> <http://cnst.gov.ab.ca> id k3IM4Km08036
> Sender: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on CourtServices
> X-Spam-Level:
> X-Spam-Status: No, score=-100.0 required=2.5 tests=USER_IN_WHITELIST=-100
> autolearn=ham version=3.1.0
>
> ==================================================================
>
> You can see the user is in the whitelist, and the score was -100, yet it
> re-wrote the subject line.
>
> Here are some relevant entries in my local.cf < http://local.cf> file:
>
> rewrite_header Subject **SPAM**
> report_safe 0
>
> Any ideas? This has never happend before and I was running 3.04 for 6
> months.
