Question about from address

Jim Dickenson dickenson at
Wed Apr 12 20:27:44 IST 2006

I may have found the source of the problem.

I have a gateway system that receives outside email and scans it. This
server then passes the mail to a server where the mailboxes are. I have the
second server setup to not scan email passed from the gateway server. As
best I can tell the email is not scanned. The MailScanner log indicates that
it is not scanned.

I had the org-name set to the same on both systems. I just changed it so
each system has a unique org-name so I can tell which system put in which
MailScanner header.

The envelope from address on the gateway server is one address but when the
email gets passed to the second server the envelope from address is a
different address.

I am guessing that some of the MailScanner headers were being replaced on
the second server.

Here are the headers after my change:

X-CfMC1-MailScanner-Information: Please contact Jim Dickenson for more
X-CfMC1-MailScanner: Found to be clean
X-CfMC1-MailScanner-SpamCheck: not spam (whitelisted),
    SpamAssassin (score=0.178, required 5, autolearn=disabled,
    NO_REAL_NAME 0.18)
X-CfMC1-MailScanner-From: frame< @ >
X-CfMC2-MailScanner-Information: Please contact Jim Dickenson for more
X-CfMC2-MailScanner: Not scanned: please contact your Jim Dickenson for
X-CfMC2-MailScanner-From: frame< @ >

I guess the question now is how can I have the second server's MailScanner
not change any of the MailScanner headers, which is what I thought was going

Another question is why did the envelop from address change?

Looking closer at the headers I do have from the original problem email I
see there are headers added by each server as well as at least the
MailScanner-From header must have been replaced:

> X-CfMC-MailScanner: Found to be clean
> X-CfMC-MailScanner-SpamCheck: spam, SpamAssassin (score=5.56, required 5,
>         autolearn=disabled, BODY_OPTIN 0.67, MILLION_EMAIL 0.42,
>         SPF_HELO_PASS -0.00, TO_BE_REMOVED_17 3.57, URI_SURVEY_ADJ 0.91)
> X-CfMC-MailScanner-SpamScore: sssss
> X-CfMC-MailScanner-Information: Please contact Jim Dickenson for more
> information
> X-CfMC-MailScanner: Not scanned: please contact your Jim Dickenson for details
> X-CfMC-MailScanner-SpamCheck:
> X-CfMC-MailScanner-From: frame< @ >

Jim Dickenson
mailto:dickenson at


> From: Glenn Steen <glenn.steen at>
> Reply-To: MailScanner discussion <mailscanner at>
> Date: Wed, 12 Apr 2006 20:27:03 +0200
> To: MailScanner discussion <mailscanner at>
> Subject: *CfMC-Spam=11.70* Re: Question about from address
> Yep, that is the "envelope sender" (Any info from the MAIL FROM: and
> RCPT TO: are considered "envelope details" since they aren't really
> part of the message as such).
> (snip)
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> -- 
> MailScanner mailing list
> mailscanner at
> Before posting, read
> Support MailScanner development - buy the book off the website! 

More information about the MailScanner mailing list