<div><div dir="auto">Make sure the spamassassin report is always added</div><div dir="auto"><br></div><div dir="auto"><a href="https://www.mailscanner.info/MailScanner.conf.index.html#Always%20Include%20SpamAssassin%20Report">https://www.mailscanner.info/MailScanner.conf.index.html#Always%20Include%20SpamAssassin%20Report</a><br></div><div dir="auto"><br></div><div dir="auto">Then you can see what is or isn't firing</div><div dir="auto"><br></div><div dir="auto">You normally need a fair of tuning</div><div dir="auto"><br></div><div dir="auto">I'd also recommend turning off auto whitelisting in spamassassin along with making sure the rbls are setup to run</div><div dir="auto"><br></div><div dir="auto"><br></div><br><div class="gmail_quote"><div>On Wed, 20 Dec 2017 at 18:33, Manuel Palachuk via MailScanner <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>

  
  
  

<div>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">All,<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif"><br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">Thank you for your help on this.<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif"><br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">It appears I had been misled as to the actual problem by the ends user. Their emails were in fact getting the subject updated to say Disarmed or spam.<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">I should have checked myself.<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">The end users in question really are just getting a lot of legitimate spam (spam below the score as they are not harmful or over markety).</span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">And these don't get marked as spam.<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">It appears someone has subscribed them to many sites for email and such, but all the emails are clean and not spam.<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">They wouldn't be removed unless the Spamassasin score was something like 9.<br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif"><br></span></p>
<p style="padding:0;margin:0"><span style="font-size:10pt;font-family:tahoma,arial,helvetica,sans-serif">I'm posting this for the next newbie to find.</span></p>
<p style="padding:0;margin:0"><span><br></span></p>
<p style="padding:0;margin:0"><span>Thank you all again.<br></span></p>
<p style="padding:0;margin:0"><span><br></span></p>
<p style="padding:0;margin:0"><span>Manuel Palachuk<br>ManuelPalachuk.com</span></p>
</div>
<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
</blockquote></div></div><div dir="ltr">-- <br></div><div class="gmail_signature" data-smartmail="gmail_signature">-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div>