Thanks once again. Here is my procmailrc: TRAP=/etc/webmin/virtual-server/procmail-logger.pl LOGFILE=/var/log/procmail.log DROPPRIVS=yes :0fw | /usr/bin/spamassassin * ^X-Spam-Status: Yes $DEFAULT DEFAULT=$HOME/Maildir/ ORGMAIL=$HOME/Maildir/
# Mails with a score of 15 or higher are almost certainly spam (with 0.05% # false positives according to rules/STATISTICS.txt). Let's put them in a # different mbox. (This one is optional.) :0: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\* /dev/null :0 $DEFAULT ____________________ and the portion of the log for a message that doesn not get scanned: >From j...@xxxxxx.net Mon Sep 28 16:03:05 2009 Subject: Pack for advanced search Folder: /home/xxxxxx/homes/john/Maildir/new/1254171791.25506_0.www.m 7674 Time:1254171791 From:j...@xxxxxx.net To:j...@xxxxxx.net User:john-xxxxxx.net Size:7722 Dest:/home/xxxxxx/homes/john/Maildir/new/1254171791.25506_0.www.xxxxxx.com Mode:None procmail: Skipped "* ^X-Spam-Status: Yes" procmail: Skipped "$DEFAULT" oh and here is the perl code of procmail-logger.pl: #!/usr/bin/perl # Output email summary for Procmail log $size = 0; while(<STDIN>) { $size += length($_); if (/^From:\s*(.*)/) { $from = $1; } elsif (/^To:\s*(.*)/) { $to = $1; } last if ($from && $to); } while(read(STDIN, $buf, 1024) > 0) { # Eat up input $size += length($buf); } $from = &address_parts($from); $to = &address_parts($to); $now = time(); $dest = $ENV{'LASTFOLDER'}; if ($dest =~ /^\S+\/sendmail.*\s(\S+)$/) { $dest = $1; } $mode = $ENV{'VIRUSMODE'} ? "Virus" : $ENV{'SPAMMODE'} ? "Spam" : "None"; print "Time:$now From:$from To:$to User:$ENV{'LOGNAME'} Size:$size Dest:$dest Mode:$mode\n"; # address_parts(string) # Returns the email addresses in a string sub address_parts { local @rv; local $rest = $_[0]; while($rest =~ /([^<>\s,'"\...@]+\@[A-z0-9\-\.\!]+)(.*)/) { push(@rv, $1); $rest = $2; } return wantarray ? @rv : $rv[0]; } -- View this message in context: http://www.nabble.com/Some-messages-not-being-checked-by-spamassassin---most-are-but-a-few-get-through-tp25615857p25653059.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.