Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (athena.apache.org: domain of rwmaillists@googlemail.com
 designates 74.125.82.178 as permitted sender)
Date: Fri, 23 Mar 2012 18:23:09 +0000
From: RW <rwmaillists@googlemail.com>
To: users@spamassassin.apache.org
Subject: Re: strange problem here with spam detection
Message-ID: <20120323182309.24179e84@gumby.homeunix.com>
In-Reply-To: <4F6C9CC7.6030303@bsolution.net>
References: <4F6C9CC7.6030303@bsolution.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Fri, 23 Mar 2012 11:54:47 -0400
Kiryl Hakhovich wrote:


> 
> so here is my observation is that when email come spamd does less
> rules checking or something??? vs when i ran it manually via sa-learn
> it yell a lot more rules being detected.
> 
> could it be that there is something i did not set up properly ? some 
> config file has wrong permissions and it is simply being ignored by
> spamd ?

It's common that when a spam is rechecked after a delay it gets a much
higher score, for the reason you are seeing here. During the delay the
source IP address and urls in the body have reported to blocklists.

Delaying spam through greylisting can help.