This is from mainlog:
2016-04-20 12:31:08 1asxpu-0000Is-Dh DKIM: d=reply1.ebay.com s=emarsys2007 c=relaxed/relaxed a=rsa-sha1 i=[hidden email] [verification succeeded]
2016-04-20 12:31:10 1asxpu-0000Is-Dh H=e3uspmta148.emarsys.net [18.104.22.168] Warning: spam-score-int: 27 (++). spamreject: 100.
There is nothing corresponding in rejectlog, at least I cannot find anything. searched by the d= address and the H= address and i.p. Since there is no to: address, I cannot ask an end user.
I do find this in the /var/logs/maillog with a corresponding time stamp:
Apr 20 12:31:08 svr6 spamd: spamd: connection from localhost [127.0.0.1]:49471 to port 783, fd 6
Apr 20 12:31:08 svr6 spamd: spamd: setuid to spamd succeeded
Apr 20 12:31:08 svr6 spamd: spamd: checking message <[hidden email]> for spamd:58
Apr 20 12:31:10 svr6 spamd: spamd: identified spam (2.7/0.0) for spamd:58 in 1.8 seconds, 60322 bytes.
Apr 20 12:31:10 svr6 spamd: spamd: result: Y 2 - DATE_IN_PAST_06_12,DCC_CHECK,HTML_MESSAGE,MONEY_BACK,RCVD_IN_DNSWL_NONE,RCVD_IN_RP_SAFE scantime=1.8,size=60322,user=spamd,u
id=58,required_score=0.0,rhost=localhost,raddr=127.0.0.1,rport=49471,mid=<[hidden email]>,autolearn=no autolearn_force=no
but nothing about the disposition of the email?
Thx for any help, or pointing me to the right place to research/ask questions.