Here is what happens:
SA gets the mail and checks it nicely. However, applying points to the mail seems to fail somehow. For example I have mails where the subjects will be rewritten according my confing with '*****SPAM*****' but the SA-Spam-Status Flag states:
No, hits=-4.8 required=5.0 tests=BAYES_00,HTML_MESSAGE autolearn=ham version=2.64
The mail itself however says:
Content analysis details: (7.8 points, 5.0 required)
So having a procmail-rule for X-Spam-Level doesn't really help.
Any ideas whats wrong with my setup?
Usually that means the message has been double-scanned..
First at the MTA layer, where it got tagged as spam and encapsulated. The encapsulation also winds up creating new headers for the message.
The second time it got called at the MDA layer (ie: procmail) and the new headers resulted in a lower score that wasn't spam. The second scan over-writes all the X-Spam headers with the new status, but doesn't modify the subject and body that were tagged by the previous run.
