Re: [courier-users] Received-SPF header

[Bowie B. <Bowie_Bailey@BUC.com>]

On 7/16/2015 9:10 AM, Sam Varshavchik wrote:
> Bowie Bailey writes:
>
>> I added the "opt BOFHSPFFROM=all" entry to Courier so that it would add
>> the Received-SPF header to incoming email.  I was hoping to be able to
>> have SpamAssassin parse that header rather than doing its own checks.
>> Unfortunately, SA ignores the header since it is placed at the bottom of
>> the header list rather than inline with the rest of the Received 
>> headers.
>>
>> Is there a reason for this?  Is there a way to have Courier add the
>> Received-SPF header at the top of the list rather than the bottom?
>
> This is the SPF check on the From: header. The From: header always 
> appears after all Received: headers. Courier wouldn't know what the 
> From: header has, until it reads it. Courier does not buffer all 
> headers, and then insert the Received-SPF header in the middle of it; 
> it is going to read all headers, and append the Received-SPF header as 
> the last header.
>
> There's also a second SPF header that can be enabled for the address 
> in the SMTP MAIL-FROM. That one will be inserted before all other 
> headers, together with Courier's Received: header.

That one looks better, but it's inserted below Courier's Received 
header, so SA still doesn't trust it because it's not clear whether it 
was added by my server or the previous one.

-- 
Bowie