Matus UHLAR - fantomas:
I happily use spamass-milter to filter spam at SMTP time.
Prior to spamass-milter, I use pyspf-milter/opendkim/opendmarc milters to mark 
if mail passes coresponding checks.

I also use authres plugin to use these results. However, it does not work when 
receiving mail.

I tried debugging both spamass-milter and spamd, and I see that the headers are 
indeed there:


May 30 17:57:03 fantomas spamd[1101]: authres: no Authentication-Results 
headers found from internal
May 30 17:57:03 fantomas spamd[1101]: rules: [...] Authentication-Results: 
fantomas.fantomas.sk; dmarc=none (p=none dis=none) header.from=xxx.sk
May 30 17:57:03 fantomas spamd[1101]: rules: [...]
May 30 17:57:03 fantomas spamd[1101]: rules: [...] Authentication-Results: 
fantomas.fantomas.sk; arc=none smtp.remote-ip=192.0.2.1
May 30 17:57:03 fantomas spamd[1101]: rules: [...]
May 30 17:57:03 fantomas spamd[1101]: rules: [...] Authentication-Results: 
fantomas.fantomas.sk; spf=pass (sender SPF  authorized) smtp.mailfrom=xxx.sk 
(client-ip=192.0.2.1;  helo=smtp8.xxx.sk; envelope-from=y...@xxx.sk; 
receiver=<UNKNOWN>)

Does anyone have an idea why spamd misses these?


when I pipe message to spamd manually, those headers are there and AUTHRES 
matches:

X-Spam-Status: No, score=-0.9 required=5.0 tests=AUTHRES_SPF_PASS,BAYES_00,
        DCC_CHECK,DMARC_MISSING,KAM_DMARC_STATUS,KAM_NUMSUBJECT,RDNS_NONE,
        SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=no
        autolearn_force=no version=4.0.0

On 30.05.23 18:48, David Bürgin wrote:
Did you check if the ‘Authentication-Results’ headers are above the
‘Received’ header generated by the milter? Per your own observation in
an older thread:

https://lists.apache.org/thread/q1vvoqvfv3fxjhwjzbjztq1y85hyn3mk

hmm, that may be that.
spamass-milter seems to put generated Received: header before 
Authentication-Results: added by other milters.

May 30 17:57:03 fantomas spamd[1101]: rules: ran header rule __DOS_RELAYED_EXT ======> 
got hit: "Received: from smtp8.xxx.sk (smtp8.xxx.sk [192.0.2.1]) by 
fantomas.fantomas.sk (Postfix 3.5.18/8.13.0) with SMTP id unknown Tue, 30 May 2>
May 30 17:57:03 fantomas spamd[1101]: rules: [...]
May 30 17:57:03 fantomas spamd[1101]: rules: [...] Authentication-Results: 
fantomas.fantomas.sk; dmarc=none (p=none dis=none) header.from=nextra.sk

that will need spamass-milter change.
thanks for noticing.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Holmes, what kind of school did you study to be a detective?
- Elementary, Watkins.  -- Daffy Duck & Porky Pig

Reply via email to