I've noticed some spam getting through over the last few days; the only common thread is that it *appears* as if my header info is not replacing some that already exists in the email. To further clarify, the "X-Spam-Status:" and "X-Spam-Level:" are there, and even the subject line was edited with "***POSSIBLE SPAM***", however the tag levels and other info in the "X-Spam-Status:" is not mine.
I suspect it's getting past my system because SA recognizes the info is already there and it bypassess the check. My Amavis doesn't cull the email because there is no "kill" lelvel in the header. So, any clue where in my setup I'm missing the part where it over-writes any existing header info? I'm using Postfix, Amavis, and all the other standard add-ons... GregA