I am using postfix and spamassassin on a Mageia 5 machine. When a mail comes in, goes through spamassassin and is labeled spam, it seems that all fo the original Received From: headers are lost and all it says it that the mail was received from localhost (my machine) from Spamassassin. I would like to see where the mail originally came from. Is there some option in postfix/spamassasin/procmail that will preserve the original headers?


--- MBSE BBS v1.0.7.2 (GNU/Linux-x86_64)
* Origin: A noiseless patient Spider (110:300/11@linuxnet)

On 21/03/18 09:42, William Unruh wrote:

I am using postfix and spamassassin on a Mageia 5 machine. When a mail comes in, goes through spamassassin and is labeled spam, it seems that all fo the original Received From: headers are lost and all it says it that the mail was received from localhost (my machine) from Spamassassin. I would like to see where the mail originally came from. Is there some option in postfix/spamassasin/procmail that will preserve the original headers?

That sounds wrong, but I don't use postfix or SA. I thought that SA
merely added a header of its own.

Is it something to do with SA sees a separate transaction, from a new originating host?

Doug.

--- MBSE BBS v1.0.7.2 (GNU/Linux-x86_64)
* Origin: Aioe.org NNTP Server (110:300/11@linuxnet)

On 2018-03-20 23:42, William Unruh wrote:

I am using postfix and spamassassin on a Mageia 5 machine. When a mail comes in, goes through spamassassin and is labeled spam, it seems that all fo the original Received From: headers are lost and all it says it that the mail was received from localhost (my machine) from Spamassassin. I would like to see where the mail originally came from. Is there some option in postfix/spamassasin/procmail that will preserve the original headers?

I don't use Mageia, so there might be differences. In my setup, SA
creates a new email in which the old one is an attachment, and can be
seen intact inside.

The outside email contains text that indicates why the mail was marked
as spam.

--
Cheers, Carlos.

--- MBSE BBS v1.0.7.2 (GNU/Linux-x86_64)
* Origin: Aioe.org NNTP Server (110:300/11@linuxnet)

On 2018-03-21, Carlos E.R. <robin_listas@es.invalid> wrote:

On 2018-03-20 23:42, William Unruh wrote:

I am using postfix and spamassassin on a Mageia 5 machine. When a mail comes >> in, goes through spamassassin and is labeled spam, it seems that all fo the >> original Received From: headers are lost and all it says it that the mail was
received from localhost (my machine) from Spamassassin. I would like to see >> where the mail originally came from. Is there some option in
postfix/spamassasin/procmail that will preserve the original headers?

I don't use Mageia, so there might be differences. In my setup, SA
creates a new email in which the old one is an attachment, and can be
seen intact inside.

The outside email contains text that indicates why the mail was marked
as spam.

Thank you. That was exactly it. And the inner one had the full headers of the original (although when I looked at first it just seemed it had the text and not the headers).


--- MBSE BBS v1.0.7.2 (GNU/Linux-x86_64)
* Origin: A noiseless patient Spider (110:300/11@linuxnet)

On 2018-03-21 03:44, William Unruh wrote:

On 2018-03-21, Carlos E.R. <robin_listas@es.invalid> wrote:

On 2018-03-20 23:42, William Unruh wrote:

I am using postfix and spamassassin on a Mageia 5 machine. When a mail comes
in, goes through spamassassin and is labeled spam, it seems that all fo the >>> original Received From: headers are lost and all it says it that the mail was
received from localhost (my machine) from Spamassassin. I would like to see >>> where the mail originally came from. Is there some option in
postfix/spamassasin/procmail that will preserve the original headers?

I don't use Mageia, so there might be differences. In my setup, SA
creates a new email in which the old one is an attachment, and can be
seen intact inside.

The outside email contains text that indicates why the mail was marked
as spam.

Thank you. That was exactly it. And the inner one had the full headers of the original (although when I looked at first it just seemed it had the text and not the headers).

Yes. I think it can be configured to do differently, but I prefer this
way. I did that years ago, so I don't remember how to change it ;-)

It would be, I think, in "~/.spamassassin/user_prefs". Mine starts with
this paragraph which may be of use (watch out: it wrapped):


# SpamAssassin user preferences file. See 'man
Mail::SpamAssassin::Conf' for
# details of what can be tweaked.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
#
#*
#* Note: this file is not read by SpamAssassin until copied into the
user directory
#* Instead, it will be copied
#* to a user's home directory, allowing them to perform personalised
#* customisation. If you want to make changes to the site-wide defaults,
#* create a file in /etc/spamassassin or /etc/mail/spamassassin instead. ###########################################################################



The file /etc/mail/spamassassin/local.cf contains this:

# 1 - attach original email as a message/rfc822 MIME part, untouched,
after the report.
# 2 - same, as text/plain
# 0 - headers only.
report_safe 1



*That* is the setting that does it :-)


--
Cheers, Carlos.

--- MBSE BBS v1.0.7.2 (GNU/Linux-x86_64)
* Origin: The Kofo System II BBS (110:300/11@linuxnet)

On Tuesday, March 20, 2018 at 7:44:02 PM UTC-7, William Unruh wrote:

On 2018-03-21, Carlos E.R. <robin_listas@es.invalid> wrote:

On 2018-03-20 23:42, William Unruh wrote:

I am using postfix and spamassassin on a Mageia 5 machine. When a mail=

comes

in, goes through spamassassin and is labeled spam, it seems that all f=

o the

original Received From: headers are lost and all it says it that the m=

ail was

received from localhost (my machine) from Spamassassin. I would like t=

o see

where the mail originally came from. Is there some option in
postfix/spamassasin/procmail that will preserve the original headers?

I don't use Mageia, so there might be differences. In my setup, SA
creates a new email in which the old one is an attachment, and can be
seen intact inside.

The outside email contains text that indicates why the mail was marked
as spam.

=20
Thank you. That was exactly it. And the inner one had the full headers of=

the

original (although when I looked at first it just seemed it had the text =

and

not the headers).

Autumn Nissen (https://www.facebook.com/anissen7) has much knowledge to tea=
ch and he apparently wants to share it. Sadly this is maybe the most frustr= ating locale for doing that because most of the responses are whining, lyin=
g, and other malarky. Pay for a consumer report on John 'The Flooder' Gohde=
and you will learn that he was in the slammer for a long time. The sites f= ail to go into that degree of detail and court reports from his jurisdictio=
n need to be court ordered. Only what John 'The Flooder' Gohde wants matter=
s to John 'The Flooder' Gohde. There is nothing you or I can do to change t= hat. It's a medical issue and it is what it is.=20

--=20
Curious how these posts are made? Email: usenet@gallopinginsanity.com

--- MBSE BBS v1.0.7.2 (GNU/Linux-x86_64)
* Origin: The Kofo System II BBS (110:300/11@linuxnet)