https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7888

--- Comment #15 from John Hardin <jhar...@impsec.org> ---
> while the software is being used maliciously, it is commercial software
> (https://www.mailwizz.com) and this rule would punish everyone who bought
> the software, legitimate or otherwise.

I was not aware of that, I'd assumed this was a service-based situation. Thanks
for that information.

> It simple suggests making the rules "non-keyed" i.e using just X- and
> not X-xxx- I'm curious to know if this would work as they suggest though.

That seems to me the best suggestion. Why they thought using randomly-named
headers was a good idea is beyond me.

Rather than taking the random bit completely out, though, I suggest changing
the prefix to something usefully unique but not random, like "X-Reactivemail-"
(your company name). If the software depends on those headers being unique to
properly process bounces et. al., that should be sufficient.

> The only exclusion is ...

There are more now.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to