mailsubject modified, but no information in the header

[Glenn Steen]

On 07/11/2007, Götz Reinicke <goetz.reinicke at filmakademie.de> wrote:
> Glenn Steen schrieb:
> > On 07/11/2007, Götz Reinicke <goetz.reinicke at filmakademie.de> wrote:
> >> Hi,
> >>
> >> I got a mail whose subject line was modified to be a spam.
> >>
> >> But in the mail header I have no information, why this message was
> >> marked as spam.
> >>
> >> I do remember that I can set an option to add this information to the
> >> header ...
> >>
> >> Forthormore, some users have also there own spamassassin settings (e.g.
> >> the global spamscore to drop spam is 8, but some users want tohave it
> >> set to 5 or less ...)
> >>
> >> The mail I mentioned was marked by this settings as no spam ....
> >>
> >> Any hints to help me solving this kind of problem? Which settings or may
> >> I check?
> >>
> >> Thanks and best regards!
> >>
> >> Götz
> > Hello Götz,
> >
> > A few examples say a lot more than a lot of words.... Chould you show
> > us the relevant headers (Subject: and the MailScanner ones)?
>
> Hi,
>
> thanks for trieing to help.
>
> The Subject looks after the mailscannerscanning like this (including the
> ""):
>
> {Spam?}  "Status-Möglichkeiten-Zukunft von Picasso"
>
> The header looks like this:
>
>
> Return-Path: <uwe.kurz at filmakademie.de>
> Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139])
>         (authenticated bits=0)
>         by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105
>         (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
>         Wed, 7 Nov 2007 09:46:18 +0100
> From: "Uwe Kurz" <uwe.kurz at filmakademie.de>
> To: "Goetz Reinicke" <Goetz.Reinicke at filmakademie.de>,
>         "Oliver Ruof" <oliver.ruof at filmakademie.de>,
>         "Benjamin Schreiber" <Benjamin.Schreiber at filmakademie.de>,
>         "Reiner Pfeiffer" <reiner.pfeiffer at filmakademie.de>
> Subject: {Spam?}
> =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?=
> Date: Wed, 7 Nov 2007 09:46:13 +0100
> Message-ID: <000001c8211a$aa6f3420$8b60863e at NB10356>
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>         boundary="----=_NextPart_000_0001_01C82123.0C339C20"
> X-Priority: 3 (Normal)
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook, Build 10.0.2627
> Importance: Normal
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> X-Filmakademie-MailScanner-Information: Please contact the ISP for more
> information
> X-Filmakademie-MailScanner: Found to be clean
> X-Filmakademie-MailScanner-From: uwe.kurz at filmakademie.de
>
And what log entries do you have for that message?
Do you have http://www.mailscanner.info/MailScanner.conf.index.html#Always%20Include%20SpamAssassin%20Report
set to "yes"?
What BLs do you have defined in MailScanner? If you have ANY AT ALL, a
hit on these will render the message to be marked as spam, regardless
of what SpamAssassin thinks about it.

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se