[SA-exim] removing existing SA headers

Chad Leigh -- Shire.Net LLC chad at shire.net
Tue Apr 27 09:01:38 PDT 2010


I know this was discussed before on the exim list (by me in fact  many many moons ago), but I wanted to get clarification on what is supposed to happen.

A friends server that I help run is also running mailman.  

A member of one of his mail lists posts and SA thinks it is a spam when it first is accepted by exim and then passed to mailman, which resends it.  This resend is now originating from the server and so we do not rerun SA as we have a rule that all email that originates on the server do not run SA.   However, the old SA headers are still being picked up by rules.  I thought that sa-exim would remove the old headers

Here is an example set of headers  (Ignore the ancient version of Spam Assassin -- it is being upgraded)  (I blanked out the actual list name as it is not relevant and no need to feed spam machines more targets)

> x-spam-flag: YES
> x-spam-checker-version: SpamAssassin 3.1.7 (2006-10-05) on utah.object.com
> x-spam-level: *******
> x-spam-status: Yes, score=7.4 required=5.0 tests=BAYES_99,GREYLIST_ISWHITE, HTML_ATTR_UNIQUE,HTML_MESSAGE,NO_REAL_NAME autolearn=disabled version=3.1.7
> x-spam-report: * 1.0 NO_REAL_NAME From: does not include a real name * 0.6 HTML_ATTR_UNIQUE BODY: HTML appears to have random attributes in * tags * 0.0 HTML_MESSAGE BODY: HTML included in message * 5.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * -0.1 GREYLIST_ISWHITE The incoming server has been whitelisted for this * recipient and sender
> x-beenthere: xxxx at object.com
> x-mailman-version: 2.1.9
> precedence: list
> list-id: Friends and Family from the Tri-Coastal Years <xxxx.object.com>
> list-unsubscribe: <http://mailman.object.com/mailman/listinfo/xxxx>, <mailto:xxxx-request at object.com?subject=unsubscribe>
> list-archive: <http://mailman.object.com/mailman/private/xxxx>
> list-post: <mailto:xxxx at object.com>
> list-help: <mailto:xxxx-request at object.com?subject=help>
> list-subscribe: <http://mailman.object.com/mailman/listinfo/xxxx>, <mailto:xxxx-request at object.com?subject=subscribe>
> content-type: multipart/mixed; boundary="===============0021976616318316845=="
> sender: xxxx-bounces at object.com
> errors-to: xxxx-bounces at object.com
> x-sa-exim-connect-ip: 209.41.94.251
> x-sa-exim-mail-from: xxxx-bounces at object.com
> x-sa-exim-scanned: No (on mail.object.com); SAEximRunCond expanded to false


The first set os x-spam stuff is from the original receipt by exim/sa-exim from the original poster

The final x-sa-exim ones are when it is re-received from mailman...


It has been several years since I messed with the mail system in any detail and I am not sure how this is supposed to be happening.

Thanks
Chad

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.merlins.org/archives/sa-exim/attachments/20100427/3df4d4a4/attachment.htm 


More information about the SA-Exim mailing list