On Thu, 10 Jan 2013 12:48:07 -0500 Ben Johnson wrote: > pon further consideration, this behavior makes perfect sense if the > mailbox user has moved the message from Inbox to Junk between scans; > Dovecot's Antispam filter is in use on this server. This action would > cause the message tokens to be added to the Bayes database, which > explains why the SA score is higher on subsequent scans, even with > network tests disabled.
Also by turning-off network tests you switch to a different score set so the score for RDNS_NONE rose.