In the meantime ere is the mail I got based on your reply!
MTA-Interface: amavisd-new-2.3.3 (20050822) at mail.powerconsult.no
X-Spam-Scanned: using SpamAssassin 3.1.4 (2006-07-25) at
mail.powerconsult.no
It looks like you are using amvis-new to integrate SA in to the mail chain.
One of its unfortunate effects for debugging is that it doesn't actually
include the mail output from SA if SA decides that it isn't spam. So we
have lost all indications of which rules hit and what didn't hit on the
mail, and are only left with Amvis' indication that the mail was in fact
scanned.
There is a way to change the amvis config to get around this, but I'm not an
Amvis person and can't help you. You could probably find it with
considerable effort searching the archives, but someone else that knows
amvis will likely respond soon.
What sort of spams are making it through? Stock spams? Or just all the
usual stuff? You may not be running any addon rule sets, and SA out of the
box isn't as good as it could be against stock spams.
Loren
