Hi all,
a couple of spam email messages got passed our spamassassin scanner
today, and on investigation I found some odd behaviour. Our mail
system scans via a pipe using the following command
"/usr/local/bin/spamc -u mailnull". If I cat the spam mail file in
question by doing a cat and pipe into this command it instantly
returns the message unmodified. If I test another email message, it
scans it for a few seconds then outputs the modified mail with updated
header showing spam score.
I also tested running the spamassassin command on the mail which is
getting passed, this correctly marks the mail as spam.
The dodgy email contains an attachment, if I make a copy of the mail
file and delete the email attachment and then scan via scanc it IS
correctly processed and marked as spam. The file with attachment is
only 600K so I dont see why this should cause a problem.
Any idea what would cause this behaviour?
thanks in advance, Andy.
