Mark wrote:
We cannot really say SA's autodetection is broken, because SA is designed to be called post-SMTP. Nor that a milter is broken per se for not adding a Received: header, as that is the responsibility of the MTA itself. But a milter using SA *can* be said to be broken if it's not proving SA with the required post-SMTP view of things. Instead of patching SA, or trying to "fix" it even, any milter using SA should simply DTRT (Do The Right Thing): which is: add a pseudo Received: header before handing it over to SA.
You'all are way behind the boat. We've already patched it to support the undocumented requirement. That's not an issue.
Perhaps SA being focused on "post-SMTP" is the problem here. Why is this the focus? In the modern world, you want to reject during SMTP not send backscatter to the poor folks whose e-mail got forged.
Frankly, a milter environment is the only possible right way to run SA. So why the constant comments as if this is some one-off weird config?
-- Jo Rhett Network/Software Engineer Net Consonance