----- Original Message -----
From: "Loren Wilton" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Wednesday, July 13, 2005 6:32 AM
Subject: Re: HELP bv lottery spam
Norton AV makes wait headers similar (but not identical) to what you see
when it is scanning outbound mail for a virus, as I recall. I suspect
this
is something similar, but I don't recognize the header.
Do you have user rules enabled? If so, check your syslog for an insecure
dependency warning from SA when this message was processed. Somehow if
you
get one of those it is guaranteed that SA won't scan the message, at least
using procmail.
No user rules, just site-wide. I am using procmail. I only have the single
example at this time, so I'm not going to worry about it much yet. Thanks
for the thoughts. John