Menu

#1 network checks are failing because headers are incomplete

open-remind
nobody
None
5
2006-08-26
2004-04-30
No

I happen to run SpamAssassin twice on each email, once
using SA-Exim and once using procmail. I noticed that
the scores from procmail were higher, often *MUCH*
higher so I investigated a little bit and found that
the DNSBL checks weren't being done in SA-Exim.

I wrote a little shell script to track the spamc
options and data that SA-Exim was using. I discovered
that the top Recieved: header (the one that is added by
Exim on my machine) is not being sent to spamc. I'm
not sure if this header has even been created yet or not.

The result, however, is that SpamAssassin will either
find no Received: headers and therefore can't check
DNSBL stuff, or it can be mislead into believing that
forged headers can be trusted since the top Received:
header is "always trustworthy".

Discussion

  • Marc Merlin

    Marc Merlin - 2006-08-26
    • status: open --> open-remind
     
  • Marc Merlin

    Marc Merlin - 2006-08-26

    Logged In: YES
    user_id=6500

    This is a known problem, but hard to fix, SA-Exim receives
    the mail as such from Exim, and unfortunately Exim only adds
    the extra line of header before delivery, but too late for
    SA-Exim

    BTW, sorry for the late reply, support for SA-Exim is done
    on the mailing list.

     
  • wayne schlitt

    wayne schlitt - 2006-08-26

    Logged In: YES
    user_id=21970

    Thanks for the followup. I *think* this was actually fixed
    quite a while, I forget how.

     

Log in to post a comment.