spamassassin double header bad behaviour

[chposter]

Hi,

we have these headers:

X-Spam-Flag: YES
X-Spam-Score: 6.866
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.866 tagged_above=0.01 required=5
tests=bla bla bla
X-Spam-Tests: InternalSpamCheck
X-Spam-Status: No, score=-98.6
X-Spam-Score: -985
X-Spam-Bar: ---------------------------------------------------
X-Ham-Report: Spam detection software [...] for details.
Content preview: .
De: xxxx,
Content analysis details: (-98.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
RULES
RULES
MORE RULES
X-Spam-Flag: NO


Obviously, it is edited, no 'from' or rules, text removed for clarity etc.


So, we have a whitelisted mail in our end, but being delivered as spam. Spambox is enabled. I suppose the first headers come from the first server. The second one, ours, adds the others: X-Spam-Score: -985. However, the first one is used to deliver the mail to spam folder.

This cpanel is 11.28.87. Maybe a bug?

 

[storminternet]

It looks like you are using cPanel older version. Please update cPanel to latest version.
Command to update cPanel.

/scripts/upcp --force

 

[chposter]

Hi,

The same happens with last version:


X-Spam-Score: 6.759
X-Spam-Score: -980

in white list and detected

-100 USER_IN_WHITELIST

but

R=virtual_user_spam T=virtual_userdelivery_spam

 

[cPanelTristan]

Hello,

The only way to investigate exactly how this is happening would be to submit a ticket to us using WHM > Support Center > Contact cPanel or via the link in my signature. I checked for any reports in our internal cases about this type of behavior, and I cannot find any existing possible bug. I also have not heard of this happening before, so I cannot state why it might be precisely. As such, by opening a ticket, we can troubleshoot the issue to track down why it is showing two X-Spam-Score in the header.

Please post the ticket number here after you've opened one, and we would then be happy to track it for you to post the results here for future reference.

Thanks!