Well, the particular bug is marked "WONTFIX" because it's not really a bug, it's an intentional behavior.
Someone was making the argument that SA should only examine the from: line for whitelists, and that's not practical. In your case it sounds like you've checked to make sure that both the return path (surecom.com) and the from: (enhanced-dsl-offer.com) aren't in your whitelist, so you're not having the problem reported in bug 1038. I re-assembled the message with these headers and I did not get a whitelist hit, so without seeing your whitelist, I'm really not sure what to say.. You could try running the message through command-line spamassassin -tLD to get some more info. It seems fairly obvious that this has something to do with SA being configured in a manner which does something you don't expect of it. For example, small typos in your user_prefs tend to wreak havoc. I'd also recommend running spamassassin --lint to check your config files for errors. Here's what I get for the re-assembled message on my test box (mostly stock 2.42, no whitelist additions, a few score mods of my own to turn off some RBLs and some rules with sub 0.1 scores). I don't get a whitelist hit. SPAM: -------------------- Start SpamAssassin results ---------------------- SPAM: This mail is probably spam. The original message has been altered SPAM: so you can recognise or block similar unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for more details. SPAM: SPAM: Content analysis details: (16.10 hits, 5.9 required) SPAM: GAPPY_SUBJECT (1.3 points) 'Subject' contains G.a.p.p.y-T.e.x.t SPAM: SUBJ_FREE_CAP (0.4 points) Subject contains "FREE" in CAPS SPAM: FREE_MONEY (-0.1 points) BODY: Free money! SPAM: DEAR_SOMETHING (1.8 points) BODY: Contains 'Dear (something)' SPAM: MARKETING_PARTNERS (1.7 points) BODY: Claims you registered with some kind of partner SPAM: NO_COST (1.0 points) BODY: No such thing as a free lunch (3) SPAM: EXCUSE_3 (0.4 points) BODY: Claims you can be removed from the list SPAM: EXCUSE_7 (0.4 points) BODY: Claims you can be removed from the list SPAM: CLICK_BELOW (0.3 points) BODY: Asks you to click below SPAM: WHILE_SUPPLIES (0.3 points) BODY: While Supplies Last SPAM: GREAT_OFFER (0.2 points) BODY: Trying to offer you something SPAM: OFFER (0.2 points) BODY: Free Offer SPAM: OFFER_EXPIRE (0.1 points) BODY: Offer Expires SPAM: DEAR_SOMEBODY (0.1 points) BODY: Contains 'Dear Somebody' SPAM: RESERVES_RIGHT (0.0 points) BODY: Reserves the right SPAM: SPAM_PHRASE_08_13 (1.4 points) BODY: Spam phrases score is 08 to 13 (medium) SPAM: [score: 9] SPAM: HTML_FONT_COLOR_GREEN (0.4 points) BODY: HTML font color is green SPAM: BIG_FONT (0.3 points) BODY: FONT Size +2 and up or 3 and up SPAM: HTML_FONT_COLOR_GRAY (0.3 points) BODY: HTML font color is gray SPAM: HTML_FONT_FACE_ODD (0.3 points) BODY: HTML font face is not a commonly used f ace SPAM: HTML_FONT_COLOR_RED (0.3 points) BODY: HTML font color is red SPAM: HTML_50_70 (0.3 points) BODY: Message is 50-70% HTML tags SPAM: HTML_FONT_COLOR_UNSAFE (0.3 points) BODY: HTML font color not within safe 6x6 x6 palette SPAM: LINES_OF_YELLING (0.2 points) BODY: A WHOLE LINE OF YELLING DETECTED SPAM: HTML_FONT_COLOR_BLUE (0.2 points) BODY: HTML font color is blue SPAM: FRONTPAGE (0.4 points) BODY: Frontpage used to create the message SPAM: CLICK_HERE_LINK (0.3 points) BODY: Tells you to click on a URL SPAM: MAILTO_LINK (0.2 points) BODY: Includes a URL link to send an email SPAM: MIME_LONG_LINE_QP (0.3 points) RAW: Quoted-printable line longer than 76 cha racters SPAM: NORMAL_HTTP_TO_IP (1.3 points) URI: Uses a dotted-decimal IP address in URL SPAM: REMOVE_PAGE (0.7 points) URI: URL of page called "remove" SPAM: MANY_EXCLAMATIONS (0.4 points) Subject has many exclamations SPAM: CTYPE_JUST_HTML (0.4 points) HTML-only mail, with no text version SPAM: SPAM: -------------------- End of SpamAssassin results --------------------- ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
