I am running amavisd-new 2.3.3 & spamd 3.1.0 on a couple of servers with
postfix running as the MTA.
I have setup some user defined rules in the
~homedir/.spamassassin/user_prefs file and most of the time, I can see the
results of running these tests in the headers.
One of the rules I have is:
header T_SUBJ_MYBAT X-Mailer =~ /The Bat/i
describe T_SUBJ_MYBAT Mailer - The Bat
score T_SUBJ_MYBAT 2.9
My problem is that I am seeing spam in my INBOX, that has a header line
that matches the rule, but the rule does not appear to be evaluated, and
the spam is passed as ham.
But the rule does catch some of the spam, because when I added it, the
number of "Bat" spams dropped significantly. The problem is that some
spam with the Bat header is still being delivered.
Is there something that would cause the rules in user_prefs to be skipped
for some emails?
I have tried several permutations of the perl pattern, with and without
the exclamation point. Same deal.
Here is the header from one of the skipped emails.
Can anyone point me in the right direction?
------------------
From [EMAIL PROTECTED] Wed May 3 06:35:26 2006
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (bob.aa-servers.com [127.0.0.1])
by bob.aa-servers.com (Postfix) with ESMTP id 24AC24D42CE
for <[EMAIL PROTECTED]>; Wed, 3 May 2006 06:35:26 -0700
(PDT)
Received: from bob.aa-servers.com ([127.0.0.1])
by localhost (bob.aa-servers.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 22853-02 for <[EMAIL PROTECTED]>;
Wed, 3 May 2006 06:35:19 -0700 (PDT)
Received: from -1211686752 (unknown [213.47.180.133])
by bob.aa-servers.com (Postfix) with SMTP id 9D7844D4302
for <[EMAIL PROTECTED]>; Wed, 3 May 2006 06:35:09
-0700 (PDT)
Received: from altacocina.com (-1211278472 [-1211783448])
by chello213047180133.tirol.surfer.at (Qmailv1) with ESMTP id
8558BB9B04
for <[EMAIL PROTECTED]>; Wed, 03 May 2006 06:34:58
-0400
Date: Wed, 03 May 2006 06:34:58 -0400
From: "Rococo H. Alerter" <[EMAIL PROTECTED]>
X-Mailer: The Bat! (v2.00.2) Personal
X-Priority: 3
Message-ID: <[EMAIL PROTECTED]>
To: Abxoefsu <[EMAIL PROTECTED]>
Subject: replica watches
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------56AB7490F761137"
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE:
6.20.0.1; VDF: 6.20.0.46; host: chello213047180133.tirol.surfer.at)
X-Virus-Scanned: amavisd-new at aa-servers.com
X-Spam-Status: No, score=0.258 tagged_above=-100.5 required=2.4
tests=[HTML_FONT_BIG=0.256, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001]
X-Spam-Score: 0.258
X-Spam-Level:
Status: RO
X-Status:
X-Keywords:
X-UID: 982
--------------------
Timothy Burt
Los Angeles, Calif. USA
