Re: header_checks and REPLACE

2014-08-11 Thread li...@rhsoft.net
Am 11.08.2014 um 14:12 schrieb Tom Hendrikx: > You're too experienced (and large-mouthed :>) to not know that security > cannot be obtained through obscurity. Header munging is almost always > the wrong solution that don't change the fact that security auditors are happy if you don't leak inter

Re: header_checks and REPLACE

2014-08-11 Thread li...@rhsoft.net
Am 11.08.2014 um 14:10 schrieb Erik Logtenberg: > Well, this isn't really the right list to discuss SpamAssassin, but a > short reply then: > > The UNPARSEABLE_RELAY isn't really a spam-test i know > but it there to warn you that your email has one or more > Received: lines that cannot be pars

Re: header_checks and REPLACE

2014-08-11 Thread Tom Hendrikx
Hi, you already did this, but I'll point you to the correct chapter anyway: RTFM :) http://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Conf.html#scoring_options You could probably do everything you want with REPLACE and backreferences in the regular expressions too, but why complica

Re: header_checks and REPLACE

2014-08-11 Thread Erik Logtenberg
Well, this isn't really the right list to discuss SpamAssassin, but a short reply then: The UNPARSEABLE_RELAY isn't really a spam-test, but it there to warn you that your email has one or more Received: lines that cannot be parsed. Maybe you have accidentally mangled a Received: line with those he

Re: header_checks and REPLACE

2014-08-11 Thread li...@rhsoft.net
thanks looks good X-Spam-Status: No, score=0.0 required=5.0 tests=UNPARSEABLE_RELAY autolearn=ham autolearn_force=no no idea wher the UNPARSEABLE_RELAY comes from and how to disable it :-( however, i am still interested in REPLACE just for things like /192\.168\.196\./ REPLACE /84\.113\.92\./ A

Re: header_checks and REPLACE

2014-08-11 Thread Erik Logtenberg
Why don't you simply configure SpamAssassin to not put the version number in the header to begin with? You can use directives like clear_headers, add_headers in your local.cf configuration file to configure these. For instance I have these two lines in my local.cf: clear_headers add_header all S

Re: header_checks and REPLACE

2014-08-11 Thread Tom Hendrikx
On 08/11/2014 01:00 PM, li...@rhsoft.net wrote: > Hi > > http://www.postfix.org/header_checks.5.html > > RULE: /X-Virus-Scanned/ REPLACE X-Virus-Scanned: Yes > BEFORE: X-Virus-Scanned: clamav-milter 0.98.4 at testserver.rhsoft.net > NOW:X-Virus-Scanned: Yes > > so far, so nice > __