RE: [Exim] Removing spamassassin headers from incoming mail

> From: exim-users-admin@???
> Sent: Thursday, 22 January 2004 2:21 AM
> On (2004/01/21 15:19), Calum Mackay wrote:
> > >However, my filter uses the first X-Spam-Score header it sees. If
> > >a spammer sends me mail with an X-Spam-Score that says the message
> > >isn't spam, my filter believes that, because it readds the
> spammer's
> > >X-Spam-Score header before it reads the one my server added.
> >
> > You could try using a more custom header for your score; e.g:
> > X-$primary_hostname-Spam-Score, and refererence this in
> your filter, and
> > in your analysis.
>
> Yes. If I don't find a cleaner way to do what I want, that'll be the
> next best thing.
>
> However, since this will be used in a large number of installations,
> any header name I generate can be "figured out" and then abused.

I do Subject rewriting by adding a "X-Subject:" line and then rewriting
that in the system filter if it's found, which I think you could use a
variant of here.

Could you not add some impossible to guess (internal, never seen by the
eyes of mere l'users) X-BlahBlah and then in the system filter, wipe out
all X-Spam headers before re-writing your own X-BlahBlah to
X-Spam-Score? I believe that SpamAssassin allows you to change the
header names it uses as well so you could ensure that your server would
only ever end up with its own headers rewriten to real SA header (and if
not, it's perl! Hunt them down!)

Ted.