Hello, I'm creating a script to help me to enhance the spamassassin rules.
As many of you may know already some spam mails add false X-Spam-Status
headers to the mail like this one:

X-Spam-Flag: YES
>
X-Spam-Score: 8.632
>
X-Spam-Level: ********
>
X-Spam-Status: Yes, score=8.632 tag=3 tag2=6 kill=8
>
tests=[ADVANCE_FEE_2=2.049, ADVANCE_FEE_3=1.435,
>
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
>
RAZOR2_CHECK=0.5, SUBJ_ALL_CAPS=1.806, SUBJ_DOLLARS=0.842]
>
... (other headers) ...

From: "FedEx Online Team" <information-deliv...@fedex.com>
>
Reply-To: fdexonl...@yahoo.com.hk
>
Subject: $800,000.00 USD
>
Date: Wed, 7 Oct 2009 19:45:48 +0300
>
Message-Id: <20091007164549.m97...@fedex.com>
>
X-Mailer: OpenWebMail 2.53
>
MIME-Version: 1.0
>
Content-Type: text/plain;
>
charset=utf-8
>
To: undisclosed-recipients:;
>
X-UEM-MailScanner-Information: Please contact the ISP for more information
>
X-MailScanner-ID: DB87A19EBEA.88A13
>
X-UEM-MailScanner: Found to be clean
>
X-UEM-MailScanner-SpamScore: s
>
X-UEM-MailScanner-From: information-deliv...@fedex.com
>
X-Spam-Status: No
>

> Dear Customer!
>

> ...(content here)...


So as you can see the second "X-Spam-Status: No" was added on purpose before
sent.

I was wondering if there is a way or maybe some option in amavis(?)  to
delete those X-Spam fake headers?

Thank you.

Reply via email to