From chad at shire.net Tue Apr 27 09:01:38 2010 From: chad at shire.net (Chad Leigh -- Shire.Net LLC) Date: Tue, 27 Apr 2010 10:01:38 -0600 Subject: [SA-exim] removing existing SA headers Message-ID: <9706A177-0E65-4A83-BA27-B4C5A3A8CF76@shire.net> I know this was discussed before on the exim list (by me in fact many many moons ago), but I wanted to get clarification on what is supposed to happen. A friends server that I help run is also running mailman. A member of one of his mail lists posts and SA thinks it is a spam when it first is accepted by exim and then passed to mailman, which resends it. This resend is now originating from the server and so we do not rerun SA as we have a rule that all email that originates on the server do not run SA. However, the old SA headers are still being picked up by rules. I thought that sa-exim would remove the old headers Here is an example set of headers (Ignore the ancient version of Spam Assassin -- it is being upgraded) (I blanked out the actual list name as it is not relevant and no need to feed spam machines more targets) > x-spam-flag: YES > x-spam-checker-version: SpamAssassin 3.1.7 (2006-10-05) on utah.object.com > x-spam-level: ******* > x-spam-status: Yes, score=7.4 required=5.0 tests=BAYES_99,GREYLIST_ISWHITE, HTML_ATTR_UNIQUE,HTML_MESSAGE,NO_REAL_NAME autolearn=disabled version=3.1.7 > x-spam-report: * 1.0 NO_REAL_NAME From: does not include a real name * 0.6 HTML_ATTR_UNIQUE BODY: HTML appears to have random attributes in * tags * 0.0 HTML_MESSAGE BODY: HTML included in message * 5.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * -0.1 GREYLIST_ISWHITE The incoming server has been whitelisted for this * recipient and sender > x-beenthere: xxxx at object.com > x-mailman-version: 2.1.9 > precedence: list > list-id: Friends and Family from the Tri-Coastal Years > list-unsubscribe: , > list-archive: > list-post: > list-help: > list-subscribe: , > content-type: multipart/mixed; boundary="===============0021976616318316845==" > sender: xxxx-bounces at object.com > errors-to: xxxx-bounces at object.com > x-sa-exim-connect-ip: 209.41.94.251 > x-sa-exim-mail-from: xxxx-bounces at object.com > x-sa-exim-scanned: No (on mail.object.com); SAEximRunCond expanded to false The first set os x-spam stuff is from the original receipt by exim/sa-exim from the original poster The final x-sa-exim ones are when it is re-received from mailman... It has been several years since I messed with the mail system in any detail and I am not sure how this is supposed to be happening. Thanks Chad -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.merlins.org/archives/sa-exim/attachments/20100427/3df4d4a4/attachment.htm