From: "James Lay" <[EMAIL PROTECTED]>
On Sun, 18 Sep 2005 02:30:14 +0200
mouss <[EMAIL PROTECTED]> wrote:
Whitehead, Brian a écrit :
>I just inherited a couple of SMTP gateways running postfix and
>spamassassin. We are seeing a huge increase in these emails with
>'Re:[]' over the last couple of weeks. One thing I've noticed is
>that in the headers of these emails they contain the line
>'X-SA-Do-Not-Rej: Yes'. From everything I've read this is a string
>that is used with Exim/SpamAssassin configurations. Can anyone tell
>me if this might be causing these spam messages to get through on
>our Postfix/SpamAssassin servers. It appears that these messages
>are completely bypassing the spamassassin scans because no
>additional spamassassin tags are being added to the headers. From
>the content these should easily be scoring a 20+ from the standard
>SA rules.
>
>
>
how are you calling SA? check that the "caller" does not whitelist
messages with this header.
Those of you running postfix can add the following to header_checks:
/^Subject: Re\[.\]/ DISCARD
They WILL discard a very large proportion of legitimate emails if
they do. This is really a rather bad test. If I had an ISP email
administrator do this to me I'd find another ISP as fast as I could.
I'd also jump down the administrator's throat. At least one mailing
list I am on features two people whose email software does this. (And
another one chains Re: Re: out forever. And, no, they will not change.
The are baby ducky imprinted on their first email software mommy and
changing would be too traumatic for them. And go figure, it is a
science fiction related list.)
{^_^}
