John Horne wrote: > Hello, > > We run site-wide SA (3.0.6), and I was asked to investigate a problem > (what exactly is not relevant). I noticed in our SA log entries such as: > > =============================================================== > Aug 29 09:56:17 mary spamd[23037]: result: Y 13 - > BAYES_99,FH_SALES_REPLY,HTML_50_60,HTML_FONT_BIG,HTML_IMAGE_ONLY_20, > HTML_MESSAGE,INVALID_MSGID,MIME_HTML_ONLY,MSGID_NO_HOST,RAZOR2_CF_RANGE_51_100, > RAZOR2_CHECK,RCVD_IN_SORBS_LOCAL,URIBL_BLACK_LOCAL > scantime=5.2,size=3097,mid=<dfee66ed26bce3c839092a95248645c8@>,bayes=1, > autolearn=no > =============================================================== > > Now I assume the 'mid=' part above refers to the Message-ID header? Our > MTA, Exim, also logs the Message-ID in its own log files. I have, I > think, located the arrival of the above message in the Exim logs (based > on date/time, sender, recipient), but it indicates that there was no > Message-ID header. > > I have searched through the MTA logs for the past month, and used a > shortened part of the above mid, but nothing was found. So the question > is how come SA shows a 'mid=dfee66ed26bce3c839092a95248645c8@' value but > the MTA log files show nothing? > > Anyone have any ideas about this?
If there is no message-ID, spamassassin generates a SHA1 hash of a portion of the body, converts it to hex, and uses that instead. SA does this for bayes-seen tracking purposes. See sub get_msgid in Bayes.pm: http://spamassassin.apache.org/full/3.1.x/dist/lib/Mail/SpamAssassin/Bayes.pm
