Found to be spam, but subject not modified?

[Julian Field]

<x-flowed>
What MTA are you using? Most of the header manipulation code is pretty
tolerant of errors already.

However, if you are using Postfix, then find
/usr/lib/MailScanner/MailScanner/Postfix.pm and edit it. On line 690 you
should find this:
     $message->{metadata}[$oldlocation] =~ s/^N$key\s+/N$key $newvalue$sep/i;
Change this to read
     $message->{metadata}[$oldlocation] =~ s/^N$key\s*/N$key $newvalue$sep/i;

At 14:24 13/10/2004, you wrote:
>This email (headers follow) was clearly spam, and the
>X-MailScanner-SpamCheck header shows it was determined to be spam by
>SpamAssassin as well as a blacklist. But the subject line was never
>modified. Has anyone seen this particular issue? I took a look through the
>archives but came up blank.
>
>Most spam is properly tagged with {SPAM?} in the header, but not this one,
>and several others we received this morning. Any ideas?
>
>We're running MS 4.34.8, SA 3.0.
>
>...
>Received: from OUTGOING79.postalmailhostings.com (unknown [69.1.199.80])
>         by xxxx.cocc.com (Postfix) with SMTP id 3E2E47D06B6
>         for <MATTHEW.RICHARD at COCC.COM>; Wed, 13 Oct 2004 00:19:46 -0400
>(EDT)
>Date:Wed, 13 Oct 2004 00:19:45 -0700
>From: K2Smokes <sorogers at OUTGOING79.emailaccountzip.com>
>To: <MATTHEW.RICHARD at COCC.COM>
>Subject:$12.99 American Marlboro Cartons

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>