Re: [Qmail-scanner-general] Using qmail-scanner on mail relays breaks spamassassin's trust path

[Jason H. <jh...@tr...>]

Why is spamassassin even running on that message? Qmail-Scanner only
triggers spamassassin on emails that don't have the RELAYCLIENT
environment variable set. I assume you are using some patch to provide
authenticated SMTP? The patches I am aware of deliberately set
RELAYCLIENT for precisely this sort of issue - does your one? (if not,
I'd say that was a bug with that patch)

Jason



On 07/08/11 06:06, spa...@ht... wrote:
> See comment 4 on https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6645
>
> Short description:
> If qmail-scanner is used on a mail relay and inserts a received-line like
>
> Received: from xxx.xxx.xxx.xxx (user1@dom...@xx...) by
> firstmailserver (envelope-from <user1@domain.local>, uid 201) with
> qmail-scanner-2.08st
> ...
>
> in front of netqmail's line
>
> Received: from unknown (HELO ?127.0.0.1?)
> (user1@dom...@xx...)
>   by 0 with ESMTPA; 29 Apr 2011 18:23:53 -0000
>
> this causes spamassassin on the target to not understand that the
> connection was authenticated, to check a dial-up IP against the PBL and
> RBL causing penalty scores and rejection of legitimate mails. I'm unsure
> whether this header also causes trouble with some other (proprietary) spam
> filtering systems, but unfortunately the admins of those servers are not
> flexible enough to check this.
>
> If possible qmail-scanner should append "with ESTMPA" to its received-line
> when the connection was authenticated to prevent such issues.
>
>
> ------------------------------------------------------------------------------
> BlackBerry&reg; DevCon Americas, Oct. 18-20, San Francisco, CA
> The must-attend event for mobile developers. Connect with experts. 
> Get tools for creating Super Apps. See the latest technologies.
> Sessions, hands-on labs, demos & much more. Register early & save!
> http://p.sf.net/sfu/rim-blackberry-1
> _______________________________________________
> Qmail-scanner-general mailing list
> Qma...@li...
> https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1