age85 wrote:

we have a default slox 9 installation, please have a look at the attached
output. We can see two different spam scores in one message.

I can't see that you get two scores in one message in the output you attached.

You atteched *one* multipart message. That single message only had one score, 14.5.

One of the *parts* attached to the message is an message/rfc822 partr, which also happens to have a spam score. But this score has nothing to do with the encapsulating multipart message and should be ignored by anything filtering based on spam score.

It looks like a system has flagged a message as spam based on the score 14.5, then built a completely new message that contains a spam report and the flagged message. The system probably did this because it as configured to do it.

> We receive the message with the lower spam value in the header.

Does this mean that you never received the message you included in your post?

> What's the reason for this?

Your system is probably configured to act like that. Since I have no idea what a default slox 9 installation is, I have no idea as to how your configuration looks.

> What happens with the higher value?

If you never receive mails with high scores they are probably rejected, discarded or bounced. Hopefully not bounced.

Regards
/Jonas
--
Jonas Eckerman, FSDB & Fruktträdet
http://whatever.frukt.org/
http://www.fsdb.org/
http://www.frukt.org/

Reply via email to