Plesk Not Deleting Identified SPAM

[KrazyBob]

Running Plesk for Linux 8.3 on Virtuozzo 3. SpamAssassin is tagging mail as SPAM but the message is being delivered. The mailbox is set for a threshold of 5.00 and instructed to delete SPAM upon receipt. Notye that the heHere's the header of just one example:

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on
XXXXX.XXXXX.XXX
X-Spam-Level: *******************************
X-Spam-Status: Yes, score=31.8 required=5.0 tests=BAYES_99,HELO_DYNAMIC_DHCP,
HTML_IMAGE_ONLY_12,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MIME_HTML_ONLY,
RCVD_IN_BL_SPAMCOP_NET,SUBJ_ALL_CAPS,URIBL_AB_SURBL,URIBL_JP_SURBL,
URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL autolearn=spam
version=3.1.9
X-Spam-Report:
* 3.1 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
* 1.0 SUBJ_ALL_CAPS Subject is all capitals
* 1.9 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?210.185.162.16>]
* 1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
* [URIs: kimatery.com forstaei.com]
* 3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
* [URIs: replame.com]
* 4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: kimatery.com wicaket.com dimeaki.com]
[forstaei.com replame.com dosexen.com]
* 2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
* [URIs: kimatery.com wicaket.com dimeaki.com]
[forstaei.com replame.com dosexen.com]
* 3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
* [URIs: kimatery.com wicaket.com dimeaki.com]
[forstaei.com replame.com dosexen.com]
* 4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
* [URIs: wicaket.com forstaei.com replame.com]
[dosexen.com]
* 1.6 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
Received: (qmail 24235 invoked from network); 29 May 2008 20:40:05 -0700
Received: from icable-docsis-162-16.belltel.ph (210.185.162.16)
by XXXXX.XXXXX.XXX with SMTP; 29 May 2008 20:40:03 -0700
Received-SPF: none (XXXXX.XXXXX.XXX: domain at XXXXX.XX does not designate permitted sender hosts)
Message-Id: <20080529103958.10093.qmail@icable-docsis-162-16.belltel.ph>
To: <XXXXX@XXXXX.XXX>
Subject: *****SPAM***** RE: SALE 87% OFF
From: VIAGRA INC <XXXXX.XXXXX.XXX>
MIME-Version: 1.0
Content-Type: text/html
X-Spam-Prev-Subject: RE: SALE 87% OFF

 

[fulopattila122]

Did you use the command line tool to adjust SPAM settings? We did. Before that we had no issue with this, afterwards those accounts are suffering from the same issue you're describing.