Questions about new Global SpamAssassin setup

[sneader]

In WHM Exim editor, we have:

ACL Options
SpamAssassinTM: Reject mail with a spam score is greater then XX at SMTP time. (xx can be10.0, 12.5, 15.0, 17.5 or 20.0)
Reject mail at SMTP time if the spam score from SpamAssassinTM is greater than 10.0.

OK, this makes sense to me so far. But then I also have:

Filters
SpamAssassinTM: Generate failure when the spam score is greater then XX (xx can be10.0, 12.5, 15.0, 17.5 or 20.0)
SpamAssassinTM: Reject mail with a spam score is greater then 20.0 with a bounce message (not at SMTP time).

Currently I have the ACL Option set to 10.0, and the Filter set to 20.0. but if I am blocking mail scoring a 10 at SMTP time, then the other block after SMTP time at 20.0 doesn't really make any sense, does it? (this ACL will never get hit).

Filters
SpamAssassinTM: Global Subject Rewrite (Enable / Disable)
Adds a tag in the subject line of messages marked as spam by SpamAssassinTM. ***SPAM*** (or whatever you choose) is added the beginning of the subject line of these emails.

OK, now I am confused. If I am blocking mail that arrives with a spam score of 10.0 at SMTP time (or even if I am rejecting mail with a score of 20.0 after SMTP time), in what situation would I have a spammy message that needs a subject rewrite

My confusion gets worse... in the user's cPanel, the option to set the subject rewrite is GONE. So, if the customer has enabled their SA to be at a level of say 5.0, where can they set their subject rewrite?

My head hurts already so let me stop there... I will probably have more questions, but maybe getting these burning questions answered will help me get started in understanding the new world of Global SA.

EDIT: OK, one more question that I really need to get answered... users can set up custom scores in their cPanel for SA (for example, FORGED_MUA_OUTLOOK is currently set to 4.2, but if they wanted to change that to 2.0, they can easily do that in cPanel). Is there a way for me to do this in the global SA config?

- Scott

 

[cPanelDavidG]

Let me address the questions for which I am certain of the answers:

The ACL will be hit for email coming into the server, but the filter would be hit for mail being transferred among mail accounts on the same server as well as all email coming into the server (but in your scenario, that mail will have already been blocked).

The subject rewrite would apply for message with a spam score below 10 (typically beginning at 5, but this is user-customizable in the cPanel interface).

 

[sneader]

Thanks David, some of that actually makes sense now!

I understand the user can customize their spam score, however do you know why their ability to change the rewrite text gone? It was there in cPanel 10, but gone in cPanel 11.

- Scott