spamassassin double header bad behaviour

chposter

Active Member
May 9, 2011
40
1
58
Hi,

we have these headers:

X-Spam-Flag: YES
X-Spam-Score: 6.866
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.866 tagged_above=0.01 required=5
tests=bla bla bla
X-Spam-Tests: InternalSpamCheck
X-Spam-Status: No, score=-98.6
X-Spam-Score: -985
X-Spam-Bar: ---------------------------------------------------
X-Ham-Report: Spam detection software [...] for details.
Content preview: .
De: xxxx,
Content analysis details: (-98.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
RULES
RULES
MORE RULES
X-Spam-Flag: NO


Obviously, it is edited, no 'from' or rules, text removed for clarity etc.


So, we have a whitelisted mail in our end, but being delivered as spam. Spambox is enabled. I suppose the first headers come from the first server. The second one, ours, adds the others: X-Spam-Score: -985. However, the first one is used to deliver the mail to spam folder.

This cpanel is 11.28.87. Maybe a bug?
 

chposter

Active Member
May 9, 2011
40
1
58
Hi,

The same happens with last version:


X-Spam-Score: 6.759
X-Spam-Score: -980

in white list and detected

-100 USER_IN_WHITELIST

but

R=virtual_user_spam T=virtual_userdelivery_spam
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
42
348
somewhere over the rainbow
cPanel Access Level
Root Administrator
Hello,

The only way to investigate exactly how this is happening would be to submit a ticket to us using WHM > Support Center > Contact cPanel or via the link in my signature. I checked for any reports in our internal cases about this type of behavior, and I cannot find any existing possible bug. I also have not heard of this happening before, so I cannot state why it might be precisely. As such, by opening a ticket, we can troubleshoot the issue to track down why it is showing two X-Spam-Score in the header.

Please post the ticket number here after you've opened one, and we would then be happy to track it for you to post the results here for future reference.

Thanks!