Watermark checking doesn't work

[Peter Peters]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mikael Syska wrote on 22-4-2008 23:52:

> I'm having the same problem ... using all default settings ...
> watermark beeing added ... but its still tagged as spam, but it should
> be returned to the user ..
> 
> MailScanner-4.67.6_1 from freebsd ports tree.

My version is 4.68.8.

> Use Watermarking = yes
> Add Watermark = yes
> Check Watermarks With No Sender = yes #
> %rules-dir%/watermarking.rules, this is my next project, as only some
> will use this as there SMTP server
> Treat Invalid Watermarks With No Sender as Spam = spam
> Check Watermarks To Skip Spam Checks = yes
> Watermark Secret = %org-name%-Secret
> Watermark Lifetime = 604800
> Watermark Header = X-%org-name%-MailScanner-Watermark:
> 
> Am I also missing something here ... or is it broken on FreeBSD 7.0 ?

I'm having some strange effects with watermarking on Redhat/CentOS. I
want to use it to prevent scanning when it has already been scanned by
one of the other internal mail servers.

Use Watermarking = yes
Add Watermark = yes
Check Watermarks With No Sender = yes
Treat Invalid Watermarks With No Sender as Spam = nothing
Check Watermarks To Skip Spam Checks = yes
Watermark Secret = %org-name%-Secret
Watermark Lifetime = 604800
Watermark Header = X-%org-name%-MailScanner-Watermark:

When I send a test e-mail through two of the servers I still see the
following:

> Received: from mailscanner1.noc.iaf.nl (boron.noc.iaf.nl [80.89.224.150])
> 	  by smtp.iaf.nl (8.13.1/8.13.1) with ESMTP id m3ME2Msl004782
> 	  (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
> 	  Tue, 22 Apr 2008 16:02:27 +0200
> X-IAF-MailScanner-Watermark: 1209481573.98826 at JgxHIFe7Jrion51pd2GRDg
> Received: from mailscanner1.noc.iaf.nl (boron.noc.iaf.nl [80.89.224.150])
> 	  by smtp.iaf.nl (8.13.1/8.13.1) with ESMTP id m3ME2Msl004782
> 	  (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
> 	  Tue, 22 Apr 2008 16:02:27 +0200
> X-IAF-MailScanner-Watermark: 1209477740.67923 at OthQNKUf2CAsnvfTirb/NA
> Received: from mx1.iaf.nl (mx1.iaf.nl [80.89.224.65])
> 	by mailscanner1.noc.iaf.nl (8.13.8/8.13.8) with ESMTP id m3ME2I3n027923;
> 	Tue, 22 Apr 2008 16:02:18 +0200

Both smtp.iaf.nl and mailscanner1.noc.iaf.nl run MailScanner with
watermarking enabled. So I think smtp.iaf.nl should detect the watermark.

> X-IAF-MailScanner: Found to be clean, Found to be clean
> X-IAF-MailScanner-From: p.g.m.peters at utwente.nl

Both IAF MailScanners seems to have scanned the message. Both have added
"Found to be clean".
Multiple Headers = append

- --
Peter Peters, Teamleider Unix/Linux-Beheer
ICT-Servicecentrum
Universiteit Twente, Postbus 217, 7500 AE Enschede
Telefoon 053 489 2301, Fax 053 489 2383,
P.G.M.Peters at utwente.nl, http://www.utwente.nl/icts
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIDuKtelLo80lrIdIRAkNyAJwLnsIDgpdt7CuAQMDskB85Jkzl4gCgk0kC
OuAayJcYLx2Ev+JhwPLPrI4=
=ESPl
-----END PGP SIGNATURE-----