[phoenix]

Originally Posted by ZAM

I needed to modify the accounts because nothing was being sent to them
They were just changed from spam@mail.xxx.com and ham@mail.xxx.com to spam@xxx.com and ham@xxx.com. Once I made this change, items started to route into the SPAM and HAM accounts.

So you changed the default domain?

Originally Posted by ZAM

When a user right-clicks on an email, they only have an option to send to Junk, is there a way to label it as not junk so they go to the HAM account trainer?

You're missing the point of the 'Not Junk' button (or menu option), that's only used to send a message that's gone to the Junk folder (a False Positive) to the Ham folder to be retrained. You should not need to train the Zimbra as/av system other than through using the Junk button.

Are you rejecting mail for unknown users on your system? Do you have a catchall account on your system?

Originally Posted by ZAM

Here is a sample of the result from a SPAM that constantly passes though. It is a classic "male enhancement" SPAM email that many users have classified as junk already.

X-Quarantine-ID: <pS2Z4Q0wX0Oj>
X-Virus-Scanned: amavisd-new at
X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char 92 hex):
X-Spam-Report: ...uy software that you\n\tdon\222t even have to [...]
X-Spam-Flag: NO
X-Spam-Score: 1.84
X-Spam-Level: *
X-Spam-Status: No, score=1.84 tagged_above=-10 required=4
tests=[BAYES_20=-0.74, HTML_MESSAGE=0.001,
RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619

That message hasn't got a high enough score to be classified as spam, I'd suggest you research through the forums for the reason that's happening.