mail still filed to /Junk even antispam is off?

[tiger2000]

Have anyone encountered same issue?

even anti-spam service is not checked, some mails are still filed to /Junk folder?

check mailbox log:

2009-10-01 10:33:48,896 INFO  [LmtpServer-313] 
[name=sc1@xxx.com;mid=17;] mailop - Adding Message: id=1209, 
Message-ID=<20081028_052301_087541.zhenaikefu_17@yyy.com>, 
parentId=-1, folderId=4, folderName=Junk.

and this email's header includes:

X-Amavis-Alert: BAD HEADER Non-encoded 8-bit data (char CC hex): Subject:
	ICBUY\314\341\320\321\243\272\304\372\265\304\327\242\262\341\320\305\317\242\n
X-Spam-Flag: YES
X-Spam-Score: 5.376
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.376 tagged_above=2 required=5
	tests=[ALL_TRUSTED=-1.44, AWL=0.021, CN_BODY_224=0.105,
	CN_BODY_228=0.202, CN_BODY_5=0.287, CN_SUBJECT_98=0.763,
	HTML_IMAGE_ONLY_28=1.014, HTML_MESSAGE=0.001,
	HTML_MIME_NO_HTML_TAG=0.512, MIME_HTML_ONLY=0.001, NO_REAL_NAME=0.55,
	SUBJ_ILLEGAL_CHARS=3.36]

by the way, that's true, this one is spam.


note : no filter is set for this user

[bdial]

i have seen this. i think if zimbra sees that X-Spam-Flag: YES it will file stuff into junk regardless if the anti-spam is running. so if another system were to tag teh e-mail as spam like on the way out then it will get filed when it reaches your system. There was a thread about this I just can't seem to find it but maybe you can search more. To truly disable it you had to modify zimbra's spam header to something that will never match anything.

[tiger2000]

Thanks, I found that thread:

[SOLVED] Disable AntiSpam

and here's the solution:

zmprov mcf zimbraSpamHeader X-Spam-Disabled
zmprov mcf zimbraSpamHeaderValue YES
zmcontrol stop
zmcontrol start


However, I'm still wondering :
How does Zimbra trigger the action :
if [X-SPAM-FLAG = YES] then ==> file it into /Junk?

Is it through amavis ? or Zimbra-default config ?

any advice on this? Thanks.