Hmm, my apologies then, My intent was not to discredit you as ignorant, but to explain the behavior. Apparently you understood this aspect of the behavior, however your original message made no indication that you understood that SA does not get the envelope. In fact, your original message is worded in a manner which quite clearly indicated that you expected it did examine the envelope itself, a simple mistake in wording.

In any event, in your standard milter-type setup SpamAssassin gets called once, and only once per message, and is called as the message arrives. It does not get called once per recipient, as it would if it was called when the message was delivered to the mailbox. Thus the problem you've identified is actually not fixable for a mitler-style deployment of SpamAssassin.

Even if SA can reliably get the envelope recipient list from the message headers, this system can be bypassed by instead of forging a To: address, having a message which really is multi-recipient, including abuse. Since spamassassin is called once for the message it is impossible for it to whitelist the copy going to abuse, without whitelisting the copies going to other users.

Sorry, but even though there's many recipients, there's still only one email. SpamAssassin can't tell the MTA "when delivering this one message to abuse, do this, but when you deliver it to the rest of the users, give them this content instead"

The only real solution to the problem you describe is to not run SA at the MTA-milter level at all, and run it on a per-account basis instead. (either MUA, or some kind of re-delivery agent that runs separately per-user, per message copy). Then it would be possible for SA to handle things differently, but the mechanism you describe would no longer be needed since each recipient could have their own independent SA configuration and would not need to have whitelist_to: abuse in the config used for normal user accounts.



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to