In the last few weeks one of my users has seen a radical increase in email spam. I did some investigating, and all the emails were scored below our threshold of 4. Some of these emails are blatantly, obviously spam, so I used an online utility to read the email (including headers) and give it a SpamAssassin score. The online utility scored these emails way way above how they were scored by the server. Like, 8.8 vs .1 or 10.3 vs .9. What might be causing SpamAssassin to fail, and what can I do about it?
Customer support service by UserEcho