Spamassassin works but not with MS

[Stephen Lee]

On Fri, 2002-10-18 at 09:52, Julian Field wrote:
> At 17:20 18/10/2002, you wrote:
> >Applying the same spam message to SA 2.43 gives the following header:
> >
> >X-MailScanner-SpamCheck: not spam, SpamAssassin (score=-157.6, required
> >4,AWL, FREE_INVESTMENT, FREE_MONEY, SIGNATURE_SHORT_DENSE,
> >SPAM_PHRASE_03_05, US_DOLLARS_3)
> >X-MailScanner-SpamCheck: not spam, SpamAssassin (score=-17.8, required
> >5,AWL)
> >
> >I would like to use AWL but it doesn't look like that's in the cards for
> >me :-(
>
> As (a) you want to use AWL, (b) it appears to be using AWL, and (c) the
> scores are negative (because of the high negative score from appearing in
> the AWL), what's the problem?
>
> It seems to be working just as expected. Or am I missing something obvious?

No, but I might be ;-) My understanding of white lists is that they
contain real addresses which should not be considered as spam. The
message of the header above is clearly spam but is not marked as such.
Some how I am confusing the purpose of AWL.

The other issue I have is that I'm forwarding spam from another server
which has almost the identical setup as the problem server (same version
of MS, SA, Perl and OS). The mailscanner.conf files for both machines
are identical. The "good" machine tagged the above message as spam and
had the following header portion:

X-Spam-Flag: YES
X-Spam-Level: Spam-Level SSSSS
X-Spam-Checker-Version: SpamAssassin 2.42 (1.115.2.14-2002-10-04-exp)
X-Spam-Report: 5.80 hits, 5 required; * 0.9 -- From: ends in numbers *
-0.1 -- BODY: Free money! * 3.2 -- BODY: Free Investment * 0.4 -- BODY:
Nigerian scam key phrase ($NN,NNN,NNN.NN) * 1.1 -- BODY: Spam phrases
score is 03 to 05 (medium) [score: 4] * 0.3 -- RAW: Message contains a
lot of ^M characters
X-MailScanner: Found to be clean
X-MailScanner-SpamCheck: SpamAssassin (score=5.5, required 4,
FREE_INVESTMENT, FREE_MONEY, FROM_ENDS_IN_NUMS, SPAM_PHRASE_03_05,
US_DOLLARS_3)

The only thing that I can think of is that once I forwarded the spam to
the "problem" machine, I messed-up the header so that it wasn't detected
as spam anymore. Am I out in left field?

Thanks,
Stephen