Re: SA rule to detect prior SA pass?

2014-06-28 Thread Benny Pedersen
On 28. jun. 2014 22.46.48 CEST, RW wrote: > remove_header clear_headers and add_header control the new headers >that are added at the end of the scan. The preexisting X-Spam-* headers > are all stripped before the header tests begin. this potently breaks dkim signed mails if this headers is dkim

Re: SA rule to detect prior SA pass?

2014-06-28 Thread RW
On Sat, 28 Jun 2014 15:30:44 +0200 Axb wrote: > On 06/28/2014 03:21 PM, RW wrote: > > I don't see how that helps. It allows you to customize the headers > > written by SA, but it doesn't stop it stripping all the pre-existing > > X-Spam-* headers. > > > > remove_header ham > > and only leave th

Re: SA rule to detect prior SA pass?

2014-06-28 Thread Dave Funk
On Sat, 28 Jun 2014, RW wrote: On Fri, 27 Jun 2014 20:43:19 -0500 (CDT) David B Funk wrote: Looking at my mail streams I see evidence that spammers sometimes add faked "SpamAssassin" headers to their messages (I assume to try to trick recipients into thinking that the message has already been

Re: SA rule to detect prior SA pass?

2014-06-28 Thread Axb
On 06/28/2014 03:21 PM, RW wrote: On Sat, 28 Jun 2014 15:05:00 +0200 Axb wrote: On 06/28/2014 03:43 AM, David B Funk wrote: Checking the SA source I found in PerMsgStatus.pm a line of code: $self->{msg}->delete_header('X-Spam-.*'); that ran before any tests. So looking for SA headers ins

Re: SA rule to detect prior SA pass?

2014-06-28 Thread RW
On Sat, 28 Jun 2014 15:05:00 +0200 Axb wrote: > On 06/28/2014 03:43 AM, David B Funk wrote: > > Checking the SA source I found in PerMsgStatus.pm a line of code: > >$self->{msg}->delete_header('X-Spam-.*'); > > that ran before any tests. So looking for SA headers inside of SA > > is pointless

Re: SA rule to detect prior SA pass?

2014-06-28 Thread Axb
On 06/28/2014 03:43 AM, David B Funk wrote: Looking at my mail streams I see evidence that spammers sometimes add faked "SpamAssassin" headers to their messages (I assume to try to trick recipients into thinking that the message has already been given a clean bill-of-health). I wrote a few test

Re: SA rule to detect prior SA pass?

2014-06-28 Thread RW
On Fri, 27 Jun 2014 20:43:19 -0500 (CDT) David B Funk wrote: > Looking at my mail streams I see evidence that spammers sometimes > add faked "SpamAssassin" headers to their messages (I assume to try > to trick recipients into thinking that the message has already been > given a clean bill-of-healt