I do have procmail setup on mail1. I didn't think of that, but thought my SMTP server would forward the message before looking at my own personal rules (the forward is in /etc/aliases).
I renamed my .procmailrc to something else so maybe that will fix it.
Also, SA does see and flag the message on mail1. After forwarding the message to mail2, the headers show up in the body of the message instead of the header itself. This is how I know mail1 SA flagged the message.
On 9/20/06, Chr. v. Stuckrad <[EMAIL PROTECTED]> wrote:
On Wed, 20 Sep 2006, Larry Starr wrote:
> Are you certain that SA even sees the message before it's forwarded?
>
> My first guess, without seeing config files, etc. Would be that your SMTP
> daemon (sendmail?) is forwarding the message as it's received.
This sounds like 'filtering with procmail' during personal delivery.
In this configuration the MTA will forward (by .forward or /etc/aliases)
*before* procmail would ever be called.
In this case the user should forward by a private procmail-rule
insteaded of the MTA, so that his procmail has a chance to filter Spam.
Stucki
