On 3 Jun 2019, at 2:20, Stephan Fourie wrote:
Hi,
We're currently seeing the rule MISSING_SUBJECT sporadically hitting
on emails that have a subject. This issue seems to have started during
last week, which is when clients started complaining about false
positive detections. Please see example headers at the following link:
https://pastebin.com/raw/GtnV67Hj
The headers are all missing the traditional space between the colon and
the header content. This is formally allowable (see
https://tools.ietf.org/html/rfc5322#appendix-A.5,) but it may be
breaking the parsing of the message. More significantly, there are what
appear to be continuation parts of folded headers which have no leading
whitespace, which is NOT allowable and will definitely break parsing.
Is this an artifact of how you copied the message or is it really that
way? If the misformatting is being done by something before SpamAssassin
sees it, SA will parse the headers incorrectly.