Hi, On the message that should have been scanned:
> The emails that has not been tagged at all: [...] > From: "Angus - 3idea" <[email protected]> > To: <[email protected]> Are you forwarding this spam from your internal account to this other internal [email protected] account? It also looked like there was no external mail server involved. If so, I would think that SA trusts your internal network, and therefore is just passing the message through without even evaluating it. If you want your internal mail to also be scanned, remove your mail server from trusted_networks and internal_networks. I think that should fix it. Regards, Alex
