Henk S wrote: > I experience the same problem. > Lots of spam and normal e-mail have X_Spam_Status: "No, score=". And > X_spam_Flag: "NO" > But not all. Sometimes it is: Yes, score=7.7 and marked as spam, sometimes > "No, score=2.0" and ofcourse not marked as spam. Even "No, score=0.0". > What is causing this and how can it be solved? > Well, it really doesn't help that you've left out any useful details at all.
Scores alone tell me, or anyone else, very, very, little. At the absolute minimum we'd need: a full X-Spam-Status (with the list of hits), and what version of SA you're running, and a crude description of the spam (enough that we'd have a good chance of finding a similar one in our inboxes). Even better would be to put one of the messages somewhere that we can look at it. (ie: pastebin, or whatever works for you). There's a few hundred different tactics spammers use to evade detection, which one is affecting your current setup is a mystery to me. However, I can tell you that the the ones with just "score=" and no numbers following are likely a messages that were too large to be scanned. If you're using spamc/spamd, by default messages larger than 500kb aren't scanned. You can change this with a command-line parameter to spamc, but be aware that scanning really large messages can bog down SA pretty badly.
