Re: [Exim] Re: spam rewriting

Top Page
Delete this message
Reply to this message
Author: Richard Lithvall
Date:  
To: Tom Kistner
CC: exiscanusers, exim-users
Subject: Re: [Exim] Re: spam rewriting
Tom Kistner wrote:

>> How difficult do you think it would be to modify the spamd interface
>> code in exiscan to accept back a rewritten message from spamd - allowing
>> the report_safe stuff to be used?
>
>
> Just getting the message back would be trivial. It would be possible to
> put it in a variable like "$spamd_message". The question is, what do you
> do with it. Replacing the original message would mean either to edit
> exims spool files (yukk) or nuke the original and create a new one with
> a new message ID (by feeding it back via BSMTP for example).
>
> No matter how you do it, it will be fairly stinky, given the integrated
> nature of exiscan-acl.
>
> Anyone else has any ideas? Copied to exim-users for wider publication.


I did patch sa-exim to handle report_safe by rewriting exims spool file
(local_scan API includes an open FD to the body of the message) and
updating the global variable $body_linecount.
(this patch has been adopted in sa-exim since version 3.1)

Ugly or not, I've successfully used this the last 5 months or so...

Regards,
Richard