https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7909
--- Comment #4 from Andrey L <[email protected]> --- Spot on, I think you are right. It IS used via milter interface. I did not realize that milter (spamass-milter to be preciese) constructs a fake "received" header from hello. The log shows that SA failed to parse some received headers, likely the one constructed by milter. So it is either a bug in spamass-milter (likely) or in SA header parsing code. Any hints how I can dump this constructed header, short of building a debug version of the milter or patching SA code? For debug I'd like to dump the constructed "received" header to something like "x-fake-received". Thanks a lot for your input! p.s. i wonder if tls connection played a role... May 18 16:04:10 mail postfix/smtpd[30928]: connect from mail-eopbgr60040.outbound.protection.outlook.com[40.107.6.40] May 18 16:04:10 mail postfix/smtpd[30928]: Anonymous TLS connection established from mail-eopbgr60040.outbound.protection.outlook.com[40.107.6.40]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) May 18 16:04:10 mail postfix/smtpd[30928]: 4Fkx625W3Mz3wYH: client=mail-eopbgr60040.outbound.protection.outlook.com[40.107.6.40] May 18 16:04:10 mail postfix/cleanup[30935]: 4Fkx625W3Mz3wYH: message-id=<am9pr03mb70289af4dc881c6620446282a1...@am9pr03mb7028.eurprd03.prod.outlook.com> May 18 16:04:11 mail spamd[2133]: spamd: connection from ::1 [::1]:58464 to port 783, fd 5 May 18 16:04:11 mail spamd[2133]: spamd: handle_user (getpwnam) unable to find user: '[REDACTED]' May 18 16:04:11 mail spamd[2133]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody May 18 16:04:11 mail spamd[2133]: spamd: processing message <am9pr03mb70289af4dc881c6620446282a1...@am9pr03mb7028.eurprd03.prod.outlook.com> for [REDACTED]:65534 May 18 16:04:12 mail spamd[2133]: spamd: identified spam (8.0/5.0) for [REDACTED]:65534 in 1.1 seconds, 46161 bytes. May 18 16:04:12 mail spamd[2133]: spamd: result: Y 8 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,MIXED_ES,SPF_FAIL,SPF_HELO_NONE,UNPARSEABLE_RELAY scantime=1.1,size=46161,user=[REDACTED],uid=65534,required_score=5.0,rhost=::1,raddr=::1,rport=58464,mid=<am9pr03mb70289af4dc881c6620446282a1...@am9pr03mb7028.eurprd03.prod.outlook.com>,autolearn=no autolearn_force=no May 18 16:04:12 mail postfix/qmgr[12038]: 4Fkx625W3Mz3wYH: from=<[REDACTED]@hoermann.ru>, size=46210, nrcpt=1 (queue active) May 18 16:04:12 mail postfix/smtpd[30928]: disconnect from mail-eopbgr60040.outbound.protection.outlook.com[40.107.6.40] ehlo=2 starttls=1 mail=1 rcpt=1 bdat=1 quit=1 commands=7 May 18 16:04:12 mail postfix/pipe[30937]: 4Fkx625W3Mz3wYH: to=<[email protected]>, relay=dovecot, delay=1.5, delays=1.4/0.03/0/0.11, dsn=2.0.0, status=sent (delivered via dovecot service) May 18 16:04:12 mail postfix/qmgr[12038]: 4Fkx625W3Mz3wYH: removed -- You are receiving this mail because: You are the assignee for the bug.
