Are you seeing any "found possible spoofed header" messages in your syslog (facility mail, level notice)? Looking through the source code, it doesn't appear that spfmilter even attempts to delete other Received-SPF headers unless it detects ones it thinks are spoofed, and even when it does decide to do so, it specifies Received-SPF as the header name to delete. The Milter function that actually deletes the header (smfi_chgheader()) actually takes a header name to act upon, so even if the filter was detecting (or mis-detecting) a spoofed Received-SPF header, the only way it could request the deletion of a Received header is if you've changed HEADER_NAME in spfmilter.c.
I'd like to learn a little more about your test setup to see if I can reproduce this locally. Can you send me the relevant snippets of your postfix main.cf or master.cf? -- Mike Markley <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
