Sorry for not being more specific. I'm not using qmail-scanner, just thought
it might be helpful to mention qmail is my MTA.
I have the same results as you after removing SA markup and retesting... The
difference between the two however is the X-Spam-Prev-Subject header - it
doesn't read '(nonexistent)' as it did in the email links I posted. Also the
missing subject rule never got hit during the test of the cleaned email.
Any chance spamd is not processing the same?
Perhaps a clever spammer trick?
> -----Original Message-----
> From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
> Sent: Thursday, November 16, 2006 8:06
> To: users@spamassassin.apache.org
> Subject: Re: Spam with two subject headers
>
> On Thu, Nov 16, 2006 at 07:43:52AM -0800, Andrew Hawthorne wrote:
> > I'm running SpamAssassin 3.1.3 on Qmail.
>
> What does that mean exactly? qmail-scanner ?
>
> > Here are two links to the headers of two of these spams: spam_1
> > <http://boxmodel.com/spam.txt> spam_2
> <http://boxmodel.com/more_spam.txt>
>
> I took them both, removed the SA markup, added GTUBE appropriately,
> and ran it
> through w/ a "rewrite_header Subject ..." config, and it worked fine.
>
> --
> Randomly Selected Tagline:
> This tagline is ANNOYWARE! To register, send me some fish.
