http://bugzilla.spamassassin.org/show_bug.cgi?id=4024
Summary: SPF and X-Envelope-From and sendmail
Product: Spamassassin
Version: 3.0.1
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: Plugins
AssignedTo: [email protected]
ReportedBy: [EMAIL PROTECTED]
The USAGE document says:
However,sendmail will not expose the MAIL FROM: sender address by default. So
if you're using sendmail, please add this to /etc/sendmail.cf :
H?l?X-Envelope-From: $f
This works fine as long as the message is received from a server that is not
also set to add this header. But if the header has already been added by a
previous server, then sendmail won't add another one. The existing header will
be below the latest Received: line so SpamAssasin won't trust it and no SPF
checks will be done. By SPF I mean the real SPF checks, not the SPF_HELO
checks.
Example headers from one that works:
X-Envelope-From: [EMAIL PROTECTED]
Return-Path: <[EMAIL PROTECTED]>
Received: from picciotto.net (picciotto.net [66.91.143.194])
by mail.tippingmar.com (8.12.10/8.12.10) with ESMTP id iBAJ9Ye1001721
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <[EMAIL PROTECTED]>; Fri, 10 Dec 2004 11:09:35 -0800
Received: from [192.168.0.4] (cpe-66-91-125-24.hawaii.rr.com [66.91.125.24])
(authenticated bits=0)
by picciotto.net (8.12.11/8.12.11) with ESMTP id iBAJ9QC5015715
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
for <[EMAIL PROTECTED]>; Fri, 10 Dec 2004 09:09:26 -1000
Message-ID: <[EMAIL PROTECTED]>
Example of one that doesn't work:
Return-Path: <[EMAIL PROTECTED]>
Received: from picciotto.net (picciotto.net [66.91.143.194])
by mail.tippingmar.com (8.12.10/8.12.10) with ESMTP id iBAIise1001311
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <[EMAIL PROTECTED]>; Fri, 10 Dec 2004 10:44:55 -0800
X-Envelope-From: [EMAIL PROTECTED]
Received: from [192.168.0.4] (cpe-66-91-125-24.hawaii.rr.com [66.91.125.24])
(authenticated bits=0)
by picciotto.net (8.12.11/8.12.11) with ESMTP id iBAIijMY015420
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
for <[EMAIL PROTECTED]>; Fri, 10 Dec 2004 08:44:45 -1000
Message-ID: <[EMAIL PROTECTED]>
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
