Missing headers in mailscanner

[Martin.Hepworth]

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Wim Bakker
> Sent: 04 April 2007 15:35
> To: mailscanner at lists.mailscanner.info
> Subject: Missing headers in mailscanner
>
>
> Hello,
>
> recently I installed mailscanner on a testserver to
> obtain information on it's behaviour.
> Setup:
>
> postfix-2.3.xx , mailscanner with recommended tarball
> for clamav and spamassassin.
> Mailwatch as webfrontend to mailscanner.
> The machine was then configured to accept mail for and
> transport mail after scanning to another server
> for a testmaildomain and after altering the MX records for that
> testdomain the test begun.
>
> Mail directly sent at the accounts in the testmaildomain
> were processed ok , spamchecking and virus scanning went
> ok and mail was transported correctly to the destination
> mailserver.
>
> To increase the amount of mail that had to be processed,
> I made an extra transport entry on another mailserver
> where I have an account to forward all mail to that
> account to one of the accounts on the testmaildomain.
> So :
> destination at maildomain.nl was transported to
> destination at testmaildomain.nl and that is where things became
annoying.
> A lot of mail that  came in from the transport was
> stripped from the subject line , the to line and
> was unreadable. Why would this happen ?
> Allso I note that mail that is regarded as spam
> gets a subject rewrite to :
> { spam? } <orig. subject>  (with a lot of times the orig_subject
> disappearing)
> where does the "{ spam? }" come from, I certainly don't have it in
> my spam.assassin.prefs.conf because I don't want a subject rewrite.
> Apart from these not so minor glitches the system works
> perfect, so I really would like to know why this happens in the
> case of a transport from another server.
> Example of headers from a unreadable mail :
> -------------------------------
> Return-Path: <kolab-devel-bounces at kolab.org>
> Received: from mail.bhagwato.eu ([unix socket])
>           by www.bhagwato.eu (Cyrus v2.3.3) with LMTPA;
>           Sun, 01 Apr 2007 14:11:11 +0200
> X-Sieve: CMU Sieve 2.3
> Received: from mx1.unetix.nl (mx1.unetix.nl [194.109.108.70])
>          by mail.bhagwato.eu (Postfix) with ESMTP id A943424291B4
>          for <wim at bhagwato.eu>; Sun,  1 Apr 2007 14:11:11 +0200 (CEST)
> Received: from mailgateway.unetix.nl (unknown [213.84.10.61])
>          by mx1.unetix.nl (Postfix) with ESMTP id 6096E303F6F7
>          for <wim at bhagwato.eu>; Sun,  1 Apr 2007 14:11:02 +0200 (CEST)
> Received: from localhost (localhost [127.0.0.1])
>          by mailgateway.unetix.nl (Postfix) with ESMTP id D64B220DF45;
>          Sun,  1 Apr 2007 14:11:34 +0200 (CEST)
> Received: from mailgateway.unetix.nl (localhost [127.0.0.1])
>          by mailgateway.unetix.nl (Postfix) with SMTP id C2D4020DF42;
>          Sun,  1 Apr 2007 14:11:34 +0200 (CEST)
> Received: from mailgateway.unetix.nl ([127.0.0.1])
>          by mailgateway.unetix.nl ([192.168.253.1])
>          with SMTP (gateway) id A05F129EE8C; Sun, 01 Apr 2007 14:11:34
> +0200
> Received: by mailgateway.unetix.nl (Postfix, from userid 1001)
>          id 950C720DF46; Sun,  1 Apr 2007 14:11:34 +0200 (CEST)
> X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on
>          mailgateway.unetix.nl
> X-Spam-Level:
> MIME-Version: 1.0
> X-unetix.nl-MailScanner-Information: Please contact the ISP for more
> information
> X-unetix.nl-MailScanner: Found to be clean
> X-unetix.nl-MailScanner-SpamCheck: spam, SpamAssassin (not cached,
>          score=9.402, required 3.3, BAYES_99 2.00, BODY_ENHANCEMENT2
0.74,
>          FORGED_RCVD_HELO 0.14, J_CHICKENPOX_47 1.60, J_CHICKENPOX_73
> 1.60,
>          MISSING_HB_SEP 2.50, MISSING_SUBJECT 0.70, TO_CC_NONE 0.13)
> X-unetix.nl-MailScanner-SpamScore: sssssssss
> X-unetix.nl-MailScanner-From: kolab-devel-bounces at kolab.org
> Subject: {Spam?}
> X-Spam-MX1: Yes
> Message-Id: <20070401121111.A943424291B4 at mail.bhagwato.eu>
> Date: Sun,  1 Apr 2007 14:11:11 +0200 (CEST)
> From: kolab-devel-bounces at kolab.org
> To: undisclosed-recipients:;

Hi

Look at the X-unetix.nl-MailScanner: header....


A . in the the X- header can cause a lot of problems and I'm pretty sure
it's an illegal character at that point.

Remove the . from the %org-name% setting in MailScanner.conf

The {Spam?} subject modifier is done by MailScanner - have a search for
this in MailScanner.conf and hopefully you'll see where this is done...

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.

Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.

Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 

Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************