removing existing SA headers
"Chad Leigh -- Shire.Net LLC" <[email protected]> Tue, 27 Apr 2010 10:01:38 -0600
| Newsgroups | gmane.mail.exim.spamassassin |
|---|---|
| Message-ID | <[email protected]> |
--===============0971191933== Content-Type: multipart/alternative; boundary=Apple-Mail-60--128360683 --Apple-Mail-60--128360683 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I know this was discussed before on the exim list (by me in fact many = many moons ago), but I wanted to get clarification on what is supposed = to happen. A friends server that I help run is also running mailman. =20 A member of one of his mail lists posts and SA thinks it is a spam when = it first is accepted by exim and then passed to mailman, which resends = it. This resend is now originating from the server and so we do not = rerun SA as we have a rule that all email that originates on the server = do not run SA. However, the old SA headers are still being picked up = by rules. I thought that sa-exim would remove the old headers Here is an example set of headers (Ignore the ancient version of Spam = Assassin -- it is being upgraded) (I blanked out the actual list name = as it is not relevant and no need to feed spam machines more targets) > x-spam-flag: YES > x-spam-checker-version: SpamAssassin 3.1.7 (2006-10-05) on = utah.object.com > x-spam-level: ******* > x-spam-status: Yes, score=3D7.4 required=3D5.0 = tests=3DBAYES_99,GREYLIST_ISWHITE, = HTML_ATTR_UNIQUE,HTML_MESSAGE,NO_REAL_NAME autolearn=3Ddisabled = version=3D3.1.7 > x-spam-report: * 1.0 NO_REAL_NAME From: does not include a real name * = 0.6 HTML_ATTR_UNIQUE BODY: HTML appears to have random attributes in * = tags * 0.0 HTML_MESSAGE BODY: HTML included in message * 5.9 BAYES_99 = BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * -0.1 = GREYLIST_ISWHITE The incoming server has been whitelisted for this * = recipient and sender > x-beenthere: [email protected] > x-mailman-version: 2.1.9 > precedence: list > list-id: Friends and Family from the Tri-Coastal Years = <xxxx.object.com> > list-unsubscribe: <http://mailman.object.com/mailman/listinfo/xxxx>, = <mailto:[email protected]?subject=3Dunsubscribe> > list-archive: <http://mailman.object.com/mailman/private/xxxx> > list-post: <mailto:[email protected]> > list-help: <mailto:[email protected]?subject=3Dhelp> > list-subscribe: <http://mailman.object.com/mailman/listinfo/xxxx>, = <mailto:[email protected]?subject=3Dsubscribe> > content-type: multipart/mixed; = boundary=3D"=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D00219766163183168= 45=3D=3D" > sender: [email protected] > errors-to: [email protected] > x-sa-exim-connect-ip: 209.41.94.251 > x-sa-exim-mail-from: [email protected] > x-sa-exim-scanned: No (on mail.object.com); SAEximRunCond expanded to = false The first set os x-spam stuff is from the original receipt by = exim/sa-exim from the original poster The final x-sa-exim ones are when it is re-received from mailman... It has been several years since I messed with the mail system in any = detail and I am not sure how this is supposed to be happening. Thanks Chad --Apple-Mail-60--128360683 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; = "><div><br></div><div>I know this was discussed before on the exim list = (by me in fact many many moons ago), but I wanted to get = clarification on what is supposed to happen.</div><div><br></div><div>A = friends server that I help run is also running mailman. = </div><div><br></div><div>A member of one of his mail lists posts = and SA thinks it is a spam when it first is accepted by exim and then = passed to mailman, which resends it. This resend is now = originating from the server and so we do not rerun SA as we have a rule = that all email that originates on the server do not run SA. = However, the old SA headers are still being picked up by rules. I = thought that sa-exim would remove the old = headers</div><div><br></div><div>Here is an example set of headers = (Ignore the ancient version of Spam Assassin -- it is being = upgraded) (I blanked out the actual list name as it is not = relevant and no need to feed spam machines more = targets)</div><div><br></div><div><blockquote type=3D"cite"><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>x-spam-flag: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; = ">YES<br></span></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>x-spam-checker-version: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; ">SpamAssassin 3.1.7 (2006-10-05) = on <a = href=3D"http://utah.object.com/">utah.object.com</a><br></span></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>x-spam-level: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; = ">*******<br></span></div><div style=3D"margin-top: 0px; margin-right: = 0px; margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>x-spam-status: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; ">Yes, score=3D7.4 required=3D5.0 = tests=3DBAYES_99,GREYLIST_ISWHITE, = HTML_ATTR_UNIQUE,HTML_MESSAGE,NO_REAL_NAME autolearn=3Ddisabled = version=3D3.1.7<br></span></div><div style=3D"margin-top: 0px; = margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><span = style=3D"font-family: Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>x-spam-report: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; ">* 1.0 NO_REAL_NAME From: does not = include a real name * 0.6 HTML_ATTR_UNIQUE BODY: HTML appears to have = random attributes in * tags * 0.0 HTML_MESSAGE BODY: HTML included in = message * 5.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * = [score: 1.0000] * -0.1 GREYLIST_ISWHITE The incoming server has been = whitelisted for this * recipient and sender<br></span></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>x-beenthere: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; "><a = href=3D"mailto:[email protected]">[email protected]</a><br></span></div><d= iv style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); = "><b>x-mailman-version: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; ">2.1.9<br></span></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>precedence: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; = ">list<br></span></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>list-id: </b></span><span style=3D"font-family: Helvetica; = font-size: medium; ">Friends and Family from the Tri-Coastal Years = <<a = href=3D"http://roselawn.object.com/">xxxx.object.com</a>><br></span></d= iv><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); = "><b>list-unsubscribe: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; "><<a = href=3D"http://mailman.object.com/mailman/listinfo/x">http://mailman.objec= t.com/mailman/listinfo/x</a>xxx>, = <mailto:[email protected]?subject=3Dunsubscribe><br></span></d= iv><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>list-archive: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; "><<a = href=3D"http://mailman.object.com/mailman/private/x">http://mailman.object= .com/mailman/private/x</a>xxx><br></span></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>list-post: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; "><<a = href=3D"mailto:[email protected]">mailto:[email protected]</a>><br></span><= /div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: = 0px; margin-left: 0px; "><span style=3D"font-family: Helvetica; = font-size: medium; color: rgb(0, 0, 0); = "><b>list-help: </b></span><span style=3D"font-family: Helvetica; = font-size: medium; = "><mailto:[email protected]?subject=3Dhelp><br></span></div><d= iv style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>list-subscribe: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; "><<a = href=3D"http://mailman.object.com/mailman/listinfo/x">http://mailman.objec= t.com/mailman/listinfo/x</a>xxx>, = <mailto:[email protected]?subject=3Dsubscribe><br></span></div= ><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); "><b>content-type: </b></span><span = style=3D"font-family: Helvetica; font-size: medium; ">multipart/mixed; = boundary=3D"=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D00219766163183168= 45=3D=3D"<br></span></div><div style=3D"margin-top: 0px; margin-right: = 0px; margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>sender: </b></span><span style=3D"font-family: Helvetica; = font-size: medium; "><a = href=3D"mailto:[email protected]">[email protected]</a><br= ></span></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>errors-to: </b></span><span style=3D"font-family: Helvetica; = font-size: medium; "><a = href=3D"mailto:[email protected]">[email protected]</a><br= ></span></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>x-sa-exim-connect-ip: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; ">209.41.94.251<br></span></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px; "><span style=3D"font-family: Helvetica; font-size: = medium; color: rgb(0, 0, 0); = "><b>x-sa-exim-mail-from: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; "><a = href=3D"mailto:[email protected]">[email protected]</a><br= ></span></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 0px; "><span style=3D"font-family: = Helvetica; font-size: medium; color: rgb(0, 0, 0); = "><b>x-sa-exim-scanned: </b></span><span style=3D"font-family: = Helvetica; font-size: medium; ">No (on <a = href=3D"http://mail.object.com/">mail.object.com</a>); SAEximRunCond = expanded to = false<br></span></div></blockquote><div><br></div><div><br></div><div>The = first set os x-spam stuff is from the original receipt by exim/sa-exim = from the original poster</div><div><br></div><div>The final x-sa-exim = ones are when it is re-received from = mailman...</div><div><br></div><div><br></div><div>It has been several = years since I messed with the mail system in any detail and I am not = sure how this is supposed to be = happening.</div><div><br></div><div>Thanks</div><div>Chad</div><div><br></= div></div></body></html>= --Apple-Mail-60--128360683-- --===============0971191933== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ SA-Exim mailing list [email protected] http://lists.merlins.org/lists/listinfo/sa-exim --===============0971191933==--