Yes, I'm using spamc/spamd. AFAIK, the message is small so I don't think it's hitting the maximum scan limit. I'm running RH 7.3 with Sendmail 8.11.6-27 along with SA 2.60 and Razor 2.36. I'm calling SA from /etc/procmailrc with:
Are you sure it's small?
The message that you gave headers for that failed to get scanned was a multipart/alternative message. It could very well have contained embedded images and/or attachments that drove it way over the size limit.
You also appear to be running some kind of mil attachment defanger and it activated on the message that did not get scanned. Which also leads me to suspect it had some kind of .exe attachment which may have brought it over the limit.
The default limit is a mere 250k, and a message with a mime-encoded .exe file will very quickly cross that line.
It's just kinda weird that some messages don't appear to get processed while others do. Does SA rely on some type of header info that could be munged by spam?
Nope, SA will work in the absence of pretty much any of the headers, although I think it might fail if _no_ headers exist at all (it does need to be able to distinguish the headers from the body).
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
