I found the problem with my setup. This is an inherited MailScanner instance and the "Spam Check" rule was pointing to a file that didn't end with .rules like I expected so my grep of *.rules was not finding a hit on these domains that have a second level of filtering downstream.<div>
<br></div><div>I have changed the rule to have a standard .rules extension now.<br><div><br></div><div>Dave<br><br><div class="gmail_quote">On Sat, Oct 2, 2010 at 3:45 PM, Dave Jones <span dir="ltr"><<a href="mailto:davejones70@gmail.com">davejones70@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Something is strange with this. I have tested 2 other MailScanner instances and they work perfectly. I guess this MailScanner.conf has something that is causing the empty SpamCheck: header. I have done a diff on the configs and nothing major jumps out as being different. I will try to debug this further but it's an odd one.<div>
<div></div><div class="h5"><br>
<br><div class="gmail_quote">On Fri, Oct 1, 2010 at 10:30 AM, Dave Jones <span dir="ltr"><<a href="mailto:davejones70@gmail.com" target="_blank">davejones70@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I tried just doing plain "Archive Mail" rule and I am seeing the same results. I am getting the blank SpamCheck: header still. The only subject modifications that are happening is the {Disarmed} tag so it appears that these are getting forwarded/archived before the SA check.<div>
<br></div><div>Do I have something wrong with my rules file? I have removed the original rules below so I only have this single archive rule in place now.</div><div><br></div><div>Archive Mail = %rules-dir%/archive.rules</div>
<div><div>FromOrTo: <a href="mailto:mailbox@mydomain.com" target="_blank">mailbox@mydomain.com</a> <a href="mailto:maibox@archive.mydomain.com" target="_blank">maibox@archive.mydomain.com</a></div><div>FromOrTo: default no</div>
<div><div></div><div><div>
<br></div><br><div class="gmail_quote">On Mon, Sep 27, 2010 at 8:45 AM, Dave Jones <span dir="ltr"><<a href="mailto:davejones70@gmail.com" target="_blank">davejones70@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Update: The problem seems to occur mainly when I have the forward in the nonspam.actions.rules file. I get all email to the forwarded address including High Spam that should be deleted.<div><br></div><div>MailScanner Version Number = 4.79.11</div>
<div><div></div><div>
<div><br><div class="gmail_quote">On Mon, Sep 27, 2010 at 8:35 AM, Dave Jones <span dir="ltr"><<a href="mailto:davejones70@gmail.com" target="_blank">davejones70@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Detailed Spam Report = yes<div>Include Scores In SpamAssassin Report = yes<div><div>Always Include SpamAssassin Report = yes</div></div></div><div><br></div><div>I am trying to send nonspam and spam to alternate mailboxes for copying email using rules with the forward action. When a forward comes from the Spam Actions rule, I get the subject tagged with spam like I expect and I get a full SpamCheck: header like below. However, when I put an email address in both Spam Actions and Non Spam Actions rule, I appear to get all email forwarded to my copy mailbox without and subject changes and the SpamCheck: is empty. The original recipient doesn't get the email when it's obviously High Spam based on the subject so the problem seems to only be with the forwarded address.</div>
<div><br></div><div>Spam Actions = %rules-dir%/spam.actions.rules</div><div>High Scoring Spam Actions = delete</div><div>Non Spam Actions = %rules-dir%/nonspam.actions.rules</div><div><br></div><div>X-???-MailScanner-SpamCheck: spam, SpamAssassin (not cached, score=8.939,</div>
<div><div><span style="white-space:pre-wrap"> </span>required 6, DCC_CHECK 1.10, HTML_MESSAGE 0.50, INVALID_DATE 1.10,</div><div><span style="white-space:pre-wrap"> </span>KAM_MX4 2.00, MIME_HTML_MOSTLY 0.43, MIME_QP_LONG_LINE 0.00,</div>
<div><span style="white-space:pre-wrap"> </span>MPART_ALT_DIFF 0.79, SPF_PASS -0.20, T_DOS_OUTLOOK_TO_MX_IMAGE 0.01,</div><div><span style="white-space:pre-wrap"> </span>URIBL_DBL_SPAM 1.70, URIBL_RHS_DOB 1.51)</div>
</div><div><br></div><div><div>%rules-dir%/nonspam.actions.rules</div><div>==========================</div><div>FromOrTo: <a href="mailto:mailbox@mydomain.com" target="_blank">mailbox@mydomain.com</a> deliver forward <a href="mailto:mailbox@archive.mydomain.com" target="_blank">mailbox@archive.mydomain.com</a></div>
<div>FromOrTo: default deliver</div></div><div><br></div><div><div>%rules-dir%/spam.actions.rules</div><div>=======================</div><div>FromOrTo: <a href="mailto:mailbox@mydomain.com" target="_blank">mailbox@mydomain.com</a> deliver striphtml forward <a href="mailto:mailbox@archive.mydomain.com" target="_blank">mailbox@archive.mydomain.com</a></div>
<div>FromOrTo: default deliver striphtml</div></div><div><br></div><div>An interesting point to note is that when I put my archive address in as the default, everything appears to work properly and I receive the SpamCheck: header and the subjects are modified.</div>
<div><br></div><div>I realize I could use the Archive feature but I wasn't sure if this feature followed the Actions rules. I don't want to copy High Scoring Spam. Does the Archive feature forward all email?</div>
<div><br></div><font color="#888888"><div>Dave</div>
</font></blockquote></div><br></div>
</div></div></blockquote></div><br></div></div></div>
</blockquote></div><br>
</div></div></blockquote></div><br></div></div>