Question about from address

[Jim Dickenson]

I may have found the source of the problem.

I have a gateway system that receives outside email and scans it. This
server then passes the mail to a server where the mailboxes are. I have the
second server setup to not scan email passed from the gateway server. As
best I can tell the email is not scanned. The MailScanner log indicates that
it is not scanned.

I had the org-name set to the same on both systems. I just changed it so
each system has a unique org-name so I can tell which system put in which
MailScanner header.

The envelope from address on the gateway server is one address but when the
email gets passed to the second server the envelope from address is a
different address.

I am guessing that some of the MailScanner headers were being replaced on
the second server.

Here are the headers after my change:

X-CfMC1-MailScanner-Information: Please contact Jim Dickenson for more
information
X-CfMC1-MailScanner: Found to be clean
X-CfMC1-MailScanner-SpamCheck: not spam (whitelisted),
    SpamAssassin (score=0.178, required 5, autolearn=disabled,
    NO_REAL_NAME 0.18)
X-CfMC1-MailScanner-From: frame< @ >scrappy.surveysampling.com
X-CfMC2-MailScanner-Information: Please contact Jim Dickenson for more
information
X-CfMC2-MailScanner: Not scanned: please contact your Jim Dickenson for
details
X-CfMC2-MailScanner-SpamCheck:
X-CfMC2-MailScanner-From: frame< @ >scrappy.surveyspot.com



I guess the question now is how can I have the second server's MailScanner
not change any of the MailScanner headers, which is what I thought was going
on.

Another question is why did the envelop from address change?



Looking closer at the headers I do have from the original problem email I
see there are headers added by each server as well as at least the
MailScanner-From header must have been replaced:

> X-CfMC-MailScanner: Found to be clean
> X-CfMC-MailScanner-SpamCheck: spam, SpamAssassin (score=5.56, required 5,
>         autolearn=disabled, BODY_OPTIN 0.67, MILLION_EMAIL 0.42,
>         SPF_HELO_PASS -0.00, TO_BE_REMOVED_17 3.57, URI_SURVEY_ADJ 0.91)
> X-CfMC-MailScanner-SpamScore: sssss
> X-CfMC-MailScanner-Information: Please contact Jim Dickenson for more
> information
> X-CfMC-MailScanner: Not scanned: please contact your Jim Dickenson for details
> X-CfMC-MailScanner-SpamCheck:
> X-CfMC-MailScanner-From: frame< @ >scrappy.surveyspot.com


-- 
Jim Dickenson
mailto:dickenson at cfmc.com

CfMC
http://www.cfmc.com/



> From: Glenn Steen <glenn.steen at gmail.com>
> Reply-To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Date: Wed, 12 Apr 2006 20:27:03 +0200
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Subject: *CfMC-Spam=11.70* Re: Question about from address
> 
> Yep, that is the "envelope sender" (Any info from the MAIL FROM: and
> RCPT TO: are considered "envelope details" since they aren't really
> part of the message as such).
> (snip)
> 
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!