Mailscanner with CRM114 - getting past "unknown" in headers

[Chris Yuzik]

Julian Field wrote:

> No, sorry. You've either got something in your sendmail.cf that is 
> intercepting the message delivery to call CRM114 or else you've got a 
> milter running or something like that.
> ps ax | grep -i milter

# ps ax | grep -i milter
  2024 pts/1    S+     0:00 grep -i milter
  3803 ?        Ssl    6:29 /usr/local/sbin/milter-null

Hmmm. Could milter-null be the source of the strangeness?

> ps ax | grep -i crm114

# ps ax | grep -i crm114
  2248 pts/1    S+     0:00 grep -i crm114

> grep -i crm114 /etc/mail/sendmail.cf

# grep -i crm114 /etc/mail/sendmail.cf
nothing

> grep -i spam /etc/mail/sendmail.cf

# grep -i spam /etc/mail/sendmail.cf
# possible access_db RHS for spam friends/haters
C{SpamTag}SPAMFRIEND SPAMHATER
# Access list database (for spam stomping)
# DNS based IP address spam list cbl.abuseat.org
# DNS based IP address spam list list.dsbl.org
# DNS based IP address spam list sbl-xbl.spamhaus.org
R$-.$-.$-.$-            $: <?> $(ednsbl 
$4.$3.$2.$1.sbl-xbl.spamhaus.org. $: OK $)
R<?>$+  $#error $@ 5.7.1 $: "554 Rejected " $&{client_addr} " found in 
sbl-xbl.spamhaus.org"
# DNS based IP address spam list zen.spamhaus.org
R$-.$-.$-.$-            $: <?> $(dnsbl $4.$3.$2.$1.zen.spamhaus.org. $: 
OK $)
R<?>$+                  $#error $@ 5.7.1 $: "554 Rejected " 
$&{client_addr} " found in zen.spamhaus.org"
R<$={SpamTag}> <$*>     $: @ $2         mark address as no match

> Those should show up anything interesting happening.

Hopefully this helped.

Chris