Question about from address

[Glenn Steen]

On 12/04/06, Jim Dickenson <dickenson at cfmc.com> wrote:
> I may have found the source of the problem.
>
> I have a gateway system that receives outside email and scans it. This
> server then passes the mail to a server where the mailboxes are. I have the
> second server setup to not scan email passed from the gateway server. As
> best I can tell the email is not scanned. The MailScanner log indicates that
> it is not scanned.
>
> I had the org-name set to the same on both systems. I just changed it so
> each system has a unique org-name so I can tell which system put in which
> MailScanner header.
>
> The envelope from address on the gateway server is one address but when the
> email gets passed to the second server the envelope from address is a
> different address.
>
> I am guessing that some of the MailScanner headers were being replaced on
> the second server.
>
> Here are the headers after my change:
>
> X-CfMC1-MailScanner-Information: Please contact Jim Dickenson for more
> information
> X-CfMC1-MailScanner: Found to be clean
> X-CfMC1-MailScanner-SpamCheck: not spam (whitelisted),
>     SpamAssassin (score=0.178, required 5, autolearn=disabled,
>     NO_REAL_NAME 0.18)
> X-CfMC1-MailScanner-From: frame< @ >scrappy.surveysampling.com
> X-CfMC2-MailScanner-Information: Please contact Jim Dickenson for more
> information
> X-CfMC2-MailScanner: Not scanned: please contact your Jim Dickenson for
> details
> X-CfMC2-MailScanner-SpamCheck:
> X-CfMC2-MailScanner-From: frame< @ >scrappy.surveyspot.com
>
>
>
> I guess the question now is how can I have the second server's MailScanner
> not change any of the MailScanner headers, which is what I thought was going
> on.
>
> Another question is why did the envelop from address change?
>
>
>
> Looking closer at the headers I do have from the original problem email I
> see there are headers added by each server as well as at least the
> MailScanner-From header must have been replaced:
>
> > X-CfMC-MailScanner: Found to be clean
> > X-CfMC-MailScanner-SpamCheck: spam, SpamAssassin (score=5.56, required 5,
> >         autolearn=disabled, BODY_OPTIN 0.67, MILLION_EMAIL 0.42,
> >         SPF_HELO_PASS -0.00, TO_BE_REMOVED_17 3.57, URI_SURVEY_ADJ 0.91)
> > X-CfMC-MailScanner-SpamScore: sssss
> > X-CfMC-MailScanner-Information: Please contact Jim Dickenson for more
> > information
> > X-CfMC-MailScanner: Not scanned: please contact your Jim Dickenson for details
> > X-CfMC-MailScanner-SpamCheck:
> > X-CfMC-MailScanner-From: frame< @ >scrappy.surveyspot.com
>
>
> --
> Jim Dickenson
> mailto:dickenson at cfmc.com
>
> CfMC
> http://www.cfmc.com/
>
Ah that makes a bit more sense.

IIRC, this is the "sanitation" done by MailScanner kicking in, to
prevent a preexisting header from ... confusing things ...
The best way to battle this is of course what you've done: Make sure
each machines header names are unique.

As to why the envelope sender changes, I'm not really sure...
(Probably something sendmail-ish ... and I'm no sendmail guru:-). I
suspect you have to look long and hard at the
CfMC1 server setup...
--
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se