One user only not routed via spamassassin

[mrvanes]

Hi,

We have a 5.0.9 NE Zimbra installation with one account for which Spam tagging does not work. All acounts on this server have the X-Spam- tags in the mailheader except only this one account. The result is that Spam is being delivered in the Inbox (that's where the complaint started).

Is there a (global?) Zimbra setting that prevents mail being routed through spamassassin at all?

[uxbod]

Do you have any users whitelisted ?

[mrvanes]

Well, we never consciously added anyone to a (global) whitelist, so one thing I wanted to know is where to look if there is one. We have no /etz/zimbra dir and no amavisd conf file contains the word whitelist (just checked).

[uxbod]

check salocal.conf aswell ... it may be easy to grep for that email address /opt/zimbra/conf

[mrvanes]

I can not find one single reference to the domain in the /opt/zimbra/conf directory (brute force grep search).

[uxbod]

Can you post the headers from one of the emails ?

[mrvanes]

These are the (censored) headers of a deliberate spam mail (copy of a mail from my personal Junk) after being received by the spam-less account:

Return-Path: ********
Received: from ****** (LHLO *******) (********) by
******** with LMTP; Thu, 12 Mar 2009 10:59:58 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by ****** (Postfix) with ESMTP id 90C1B3A0AAF
for <******>; Thu, 12 Mar 2009 10:59:58 +0100 (CET)
X-Virus-Scanned: amavisd-new at ********
Received: from ******* ([127.0.0.1])
by localhost (******** [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id N4LnmGpC6kyo for <*********>;
Thu, 12 Mar 2009 10:59:53 +0100 (CET)
Received: from minivanes (unknown [*********])
by ********* (Postfix) with ESMTP id 211403A02B0
for <**********>; Thu, 12 Mar 2009 10:59:27 +0100 (CET)
Date: Tue, 10 Mar 2009 08:11:42 -0700
Reply-To: "Emerita Denyse"
From: "Emerita Denyse"
Subject: 123 - Buy****** 100mg Only $1.85 Per Unit, High Quality Cheap ******Pills, Order Online, NoPrescription. Worldwide shipping aaim em63
In-Reply-To:
To:
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: 8bit
X-UID: 62030
X-Length: 2386
Status: R
X-Status: N
X-KMail-EncryptionState:
X-KMail-SignatureState:
X-KMail-MDN-Sent:
Message-Id: <20090312095945.211403A02B0@***********>