Hi, On the message that should have been scanned:
> The emails that has not been tagged at all: [...] > From: "Angus - 3idea" <angus.d...@3idea.com> > To: <supp...@3idea.com> Are you forwarding this spam from your internal account to this other internal supp...@3idea.com account? It also looked like there was no external mail server involved. If so, I would think that SA trusts your internal network, and therefore is just passing the message through without even evaluating it. If you want your internal mail to also be scanned, remove your mail server from trusted_networks and internal_networks. I think that should fix it. Regards, Alex
