> 2) I am only stating that the behavior of _Qpsmtp_ will change if the
> default behavior of the _SpamAssassin_ plugin is changed. I agree with
> Michael that the current behavior of Qpsmtpd/SA is arguably wrong, but
> it _is_ the current behavior and I question whether it should be
> casually changed without prominent notice.
It is my strong opinion that the spamassassin plugin should show the
absolutely same behaviour as major spamassassin solutions out there
(like amavisd with spamassassin). Everything else is potentially
dangerous and can and will cause confusion. I see this change of
behaviour mere as a bug beeing fixed like we fix bug after bug on a
steady basis.
I'm very certain that nobody right now uses the bug/feature that
old X-Spam-Status lines are not getting removed. Therefore changing
the default behaviour won't probably break nothing, but will prevent
confusion, bugs and bad configuration from everyone newly installing
qpsmtpd. And: I really believe that the standard configuration should
not be subject to exploits. It was already reported, that spammers
try to abuse such bugs by forging X-Spam-Status lines. If anyone feels
the urge to honor old X-Spam-Status lines which can be forged, he/she
should need to turn it on on purpose.
-kju
--
It's an insane world, but i'm proud to be a part of it. -- Bill Hicks
