Hi, you already did this, but I'll point you to the correct chapter anyway: RTFM :)
http://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Conf.html#scoring_options You could probably do everything you want with REPLACE and backreferences in the regular expressions too, but why complicate things when unnecessary. You're too experienced (and large-mouthed :>) to not know that security cannot be obtained through obscurity. Header munging is almost always the wrong solution. Tom On 08/11/2014 01:59 PM, li...@rhsoft.net wrote: > thanks looks good > > X-Spam-Status: No, score=0.0 required=5.0 tests=UNPARSEABLE_RELAY > autolearn=ham autolearn_force=no > no idea wher the UNPARSEABLE_RELAY comes from and how to disable it :-( > > however, i am still interested in REPLACE just for things > like /192\.168\.196\./ REPLACE /84\.113\.92\./ > > Am 11.08.2014 um 13:51 schrieb Erik Logtenberg: >> Why don't you simply configure SpamAssassin to not put the version >> number in the header to begin with? >> >> You can use directives like clear_headers, add_headers in your local.cf >> configuration file to configure these. >> >> For instance I have these two lines in my local.cf: >> >> clear_headers >> add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ >> tests=_TESTS_ autolearn=_AUTOLEARN_ >> >> This gives me headers like this: >> >> X-Spam-Status: No, score=-7.0 required=5.0 >> tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,RCVD_IN_DNSWL_HI,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL >> autolearn=ham >> >> On 11-08-14 13:00, li...@rhsoft.net wrote: >>> Hi >>> >>> http://www.postfix.org/header_checks.5.html >>> >>> RULE: /X-Virus-Scanned/ REPLACE X-Virus-Scanned: Yes >>> BEFORE: X-Virus-Scanned: clamav-milter 0.98.4 at testserver.rhsoft.net >>> NOW: X-Virus-Scanned: Yes >>> >>> so far, so nice >>> _____________________________________ >>> >>> but in case of "X-Spam-Status" i am out of ideas to get only the >>> "version=3.4.0" >>> away to not leak software versions and if possible the wrong >>> "UNPARSEABLE_RELAY" >>> and i am even not sure if it is possible at all >>> >>> the rest of the SpamAssasin header should stay untouched >>> >>> X-Spam-Status: No, score=0.0 required=5.0 tests=UNPARSEABLE_RELAY >>> autolearn=ham autolearn_force=no version=3.4.0 >>> >>
signature.asc
Description: OpenPGP digital signature
