I had MailScanner installed with ClamAV and SA. I replaced that with Exiscan with ClamAV and SA. The Exiscan intaller supposedly uninstalled MailScanner.

Now, when I get spam, SA will identify it as spam and then where does it go? I have disabled the spambox in cPanel. SpamAssassin is installed and running as non-spam gets delivered with X-Spam headers.

I can not locate a spam box anywhere on the server. Mail queue is nearly empty all the time. I know that I get a good amount of spam as when the last WHM upgrade happened it broke spamd and I was getting 100+ psams per hour to each account I have. After repairing SA3.0 to work properly, I no longer get spam, but I thought it was supposed to tag it and deliver when not using MailScanner.

any ideas?

anyone?

With exiscan and the right rules, spam doesnt go anywhere: It just isnt accepted in the server. The server informs the sender when mail is being received that mail isnt accepted. In short: spam is rejected instead of being received and later scanned.

Mail that escapes from this rules, is passed to SA. What SA does with those mails is what you have configured in your domain mail options.

when spamd was broken last weekend, i was still getting mail. Exiscan should not have been effected by that correct? so what exiscan was letting through the RBLs, should have been going to SA. Since SA was broken the spam was coming through. Now that SA is fixed and exiscan is still running, the mail that SA was seeing and marking as spam is not being delivered.

I have basic rules installed at the server level and the spam box is disabled for the domain I am using for mail.

If I remove SA from the domain packages and let the users not set their own rules (only a few friends that host from me and use mail) then whatever mail SA gets should be delivered to the end user (tagged as spam or not depending on score), correct?

Correct. But SpamAssasin is disabled by default on accounts. You need to enable it on every domain you want it to tag mails.

What I dont know is if that will work if you remove SpamAssassin from packages. I never remove anything from cpanel. Instead I remove it from Rvskin, which let it enabled but doesnt allow users to use it (I'm talking about other features. I let users to decide if they want to use SpamAssasin by themselves)

boy, do I feel like an idiot. I forgot that I had setup an filter on the spam header to discard spam mail.

thanks for the help though. i'm adjusting the spam score trigger now so it'll deliver the mistagged stuff. I'll filter it laster and adjsut my rules as we go.