getting mad -- exim, spamd

[echelon23]

hi there,

since i merged mail-filter/procmail-3.22-r7 my system is screwed up. no spam check, no procmail filtering.

so i remerged exim with exiscan-acl support, added some stuff into my exim.conf and -- nothing. okay, more than nothing
i added "| /usr/bin/procmail" into my .forward so procmail runs now. and spamd runs now, i added

acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_content
spamd_address = 127.0.0.1 783
.

but: spamassassin does not what i want, more precisely i dont understand what he does.

my mails look now like that
[header snipped]

X-Spam-Level: -4.2 (----)
X-Spam-Status: Spam detection software, running on the system "foo.local", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: asd -- //-- 10 GB Mailbox, 100
FreeSMS/Monat http://www.gmx.net/de/go/topmail +++ GMX - die erste
Adresse für Mail, Message, More +++ [...]
Content analysis details: (-4.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 SARE_HEAD_HDR_XGMXAV Message headers used which identify spam
-3.3 ALL_TRUSTED Did not pass through any untrusted hosts
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000]
0.0 AWL AWL: From: address is in the auto white-list

[snipp]


before that my mails looked like this:
[snip]

X-Spam-Checker-Version: SpamAssassin 3.0.4-gr0 (2005-06-05) on foo.local
X-Spam-Level:
X-Spam-Status: No, score=1.0 required=5.0 tests=BAYES_00,HELO_DYNAMIC_DHCP,
SARE_HEAD_HDR_XGMXAV,SARE_HELO_EQ_DSL_3 autolearn=no version=3.0.4-gr0
X-Spam-Report:
* 0.6 SARE_HELO_EQ_DSL_3 SARE_HELO_EQ_DSL_3
* 1.7 SARE_HEAD_HDR_XGMXAV Message headers used which identify spam
* 1.2 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
* -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
* [score: 0.0000]

[snap]


why does SA attach the original mail? it is no spam at all, but SA say it is.
i'm confused.

the interesring part of the exim.conf is this, isn't it?

[....]
warn message = X-Spam-Level: $spam_score ($spam_bar)
spam = nobody:true
warn message = X-Spam-Status: $spam_report
spam = nobody:true

# Add X-Spam-Flag if spam is over system-wide threshold
warn message = X-Spam-Flag: YES
spam = nobody

# finally accept all the rest
accept

[...]


btw: i don't use clamav.



thx for any suggestions

echelon23

[echelon23]

okay found the mistake:

spam = nobody:true

is a side effect, read in exim doku