On Sun, 5 Jul 2009 16:29:25 -0700 (PDT) MrGibbage <s...@pelorus.org> wrote:
> > What would cause my SA installation to score a message 0 every once > in a while? Last night I received a spam message in my inbox, which > is kinda strange since SA is pretty much foolproof for me. Upon > further investigation, I found out that the message was scored 0 > --not a single hit on any rules. I then piped the clean message > through my procmail script again, only to have it hit on a dozen > rules and be classified as spam. The first time it looks like SA did > indeed run; it doesn't look like it ran out memory or anything like > that. What else might I want to look at? > > Here are my logs after SA saw the message: > http://pelorus.org/failed-log.txt <-first pass SA log > http://pelorus.org/passed-log.txt <- second pass SA log > > Here is the full message with headers: > http://pelorus.org/first_pass_with_markup.txt > http://pelorus.org/second_pass_with_markup.txt > > Remember, the first time it got through and made it to my inbox. The > second time SA caught it. I'm not sure exactly what you did, but most of the hits on the second pass seem to to be artifacts of the way the way you fed the original back-in. The second time around it seems that the original headers were treated as part of the the body, making it look like an email with no headers. Presumambly a blank line got prepended somehow.
