[Pkg-exim4-users] spamassassin headers

[Marc Haber]

On Fri, Apr 21, 2006 at 03:32:46PM +0800, Chris Purves wrote:
> Marc Haber wrote:
> >On Fri, Apr 21, 2006 at 09:39:46AM +0800, Chris Purves wrote:
> >>This doesn't answer your question directly, but I use sa-exim and it 
> >>makes it very simple for integration of spamassassin with exim.
> >
> >What's the advantage of sa-exim over exim's built-in ACL-based
> >spamassassin interface?
> >
> 
> That's a good question and one I've been wondering about myself lately. 
>  I haven't used the built-in spamassassin ACL, but from what I 
> understand from the exim specicification, you cannot make use of changes 
> made to the message by spamassassin.

You cannot directly make changes, but it surely is possible to add the
results of the scan to the message, for example like this:

X-Spam-Score: (-) -1.9
X-Spam-Report: torres.zugschlus.de
        Content analysis details:   (-1.9 points, 5.0 required)
        pts  rule name              description
        ---- ---------------------- -------------------------------------------
        1.3 INFO_TLD                URI: Contains an URL in the INFO top-level domain
        -2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%  [score: 0.0000]
        -0.6 AWL                    AWL: From: address is in the auto white-list


> I believe that Andreas Metzler confirms this.

And http://www.exim.org/eximwiki/ExiscanExamples contains instructions
about how to do this. Please note that the majority of the complexity
mentioned in that document is getting the headers removed before
re-adding them.

> I like to have spamassassin write the test results to the headers and 
> sa-exim allows this.  Also, if you're not comfortable with editing the 
> exim configuration, sa-exim has a separate configuration file.  This was 
> a big plus for me when I installed it six months ago, since I didn't 
> understand the exim configuration.

Running a tool without understanding its configuration is like asking
for trouble.

> One of the features promoted by the author, but not used by me, is the 
> ability to teergrube: hold an incoming spam connection for some minutes 
> thereby using up the spammers' resources.

Can be done with ACLs as well, using the delay command.

> I'm interested to hear what others have to say.

So am I.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835