Re: [exim] exim 4, spam forward, header rewriting, postfix

Top Page
Delete this message
Reply to this message
Author: Chris Meadors
Date:  
To: exim-users
Subject: Re: [exim] exim 4, spam forward, header rewriting, postfix
On Thu, 2005-01-27 at 21:54 +0100, Rakotomandimby (R12y) Mihamina wrote:
> Hello.
>
> I have a problem with one mail system.


This one mail system is not an Exim system as it sounds.

> First, I used an exim4 MTA combined with SA. (Let SA be SpamAssassin)
>
> SA used to rewrite the X-Spam-xxx flags to report what he finds. It's
> OK, the stuff work very well, the $HOME/.forward filter on X-Spam-xxx
> header is OK.
>
> SA changes the spam message and the body becomes the SA report and the
> initial Spam becomes attachement.


This is configurable:

rewrite_subject         0
report_safe             0


> Now, my physical mail server is about to change, and I'm now based on
> another mail server wich is a postfix one, on another domain.
>
> The idea I found is to edit /etc/alias on the first (exim) server to
> tell to forward the messages for my-login to my my-login@???
> Like this:
>
> mihamina : mihamina@???
>
> It works... almost:
>
> On the new server is also a running SA.
>
> The messages modified by SA on the first server are forwarded too, but
> they're modified, and the body is the SA report.
>
> The second SA (on the postfix-procmail) checks it and finds it OK and
> then overwrite the X-Spam-xxx! then I receive it instead of having it
> processed by procmail!
>
> Doesn't SA check the X-Spam header before overwriting it? Who rewrote
> the X-Spam header? Can I assume it's the second SA check?


No, it is a feature that SA doesn't look at the X-Spam-* headers. Else
a spammer could just mark the mail as being not spam and SA would pass
on it. SA just clobbers all those headers and writes new ones based on
its own scanning.

--
Chris