Eric A. Hall wrote:
On 5/11/2005 6:58 AM, Martin G. Diehl wrote:
I saw a SPAM message with the SPAMassassin message headers (X-spam headers) grossly out of sequence. The message was recognized as SPAM ... but because the X-spam headers were written in the wrong part of the message, it was able
I get this periodically too. Very annoying.
I haven't really looked into this much yet, but it appears that some embedded CR or LF characters are getting processed by SA and then fed back to Postfix, which then cleans up the message and splits the headers where it sees the bare CR or LF. The result is two sets of headers, the second of which naturally becomes part of the body.
I've dealt with this phenomenon by having postfix check the message body for the locally-generated X-Spam-NTRG "header" (apart from the header block check), and reject those messages.
If somebody wants to see the message I should have it in my trash still.
Please send the headers for that message.
Thanks
Martin