Hi all,

we're using CGPSA on OSX Server 10.5.8 and CGP 5.1.16 in Full-Featured
Mode. We now received complaints from a big provider/ISP that we send out
spam to their servers.

After examining the headers of those messages, it seems they are all
messages coming from groups on our server that are configured to redirect
mail to a mailbox at that provider.

we have added the domainname of the people who forward their mail using
the groups into the "scan_domains" list in the CGPSA config file. Now I'm
trying to catch all the messages that are spam into a central quarantine
mailbox.

I'm using this rule:

(
      ("Header Field", is, "X-Autogenerated: group"),
      ("Header Field", is, "X-Spam-Flag: YES"),
      (
        "Header Field",
        in,
        "X-Spam-Checker-Version: mailscanner"
      )
    ),
    (("Store in", "~spambox@domain.com/QUARAN"), (Discard))
  ),


But it does not work.
If I look at the headers of those messages delivered in the mailbox of
the provider, we can see that there is a X-Spam-Flag: YES header added by
CGPSA.

Any ideas what I'm missing?