Re: X-Spam headers omission for trusted IPs

2013-08-20 Thread John Hardin

On Tue, 20 Aug 2013, Matus UHLAR - fantomas wrote:


> On 19.08.13 19:37, Catalin Constantin wrote:
> > Is there any setting in spamassassin to make it NOT add the X-Spam 
> > headers

> > for mails which are originating from trusted ips (listed in
> > trusted_networks) ?



On Tue, 20 Aug 2013, Matus UHLAR - fantomas wrote:
> Configure your mailer not to filter such spam with SpamAssassin.
> I assume they are already filtered by SA on those hosts, aren't they?


On 20.08.13 06:48, John Hardin wrote:
Hazardous assumption. Again, "trusted" means "trusted to not forge Received 
headers", not "trusted to not send spam".


If the OP trusts those hosts to provide correct X-Spam headers


...where do you get that idea?


(and if not, it would hardly be trusted)


"trust" is about not forging the MTA path history in Received headers so 
that RBL lookups pushed closer to the source will return valid results. 
It's not about X-Spam headers or the likelihood of spam coming in via 
that route.



there's no need to scan the mail again. Unless we have local BAYES or other
reason to scan the mail locally, they don't need to be scanned.


Agreed, if a source has reliable scanning in place there's no need to scan 
again. I don't think that's what Catalin is asking about, though.


Catalin, let me clarify: Do you think "trusted" means that spam won't be 
coming from that source and thus scanning and reporting a score can be 
safely bypassed for messages from that source?


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Maxim IX: Never turn your back on an enemy.
---
 4 days until the 1934th anniversary of the destruction of Pompeii


Re: X-Spam headers omission for trusted IPs

2013-08-20 Thread Matus UHLAR - fantomas

On 19.08.13 19:37, Catalin Constantin wrote:

Is there any setting in spamassassin to make it NOT add the X-Spam headers
for mails which are originating from trusted ips (listed in
trusted_networks) ?



On Tue, 20 Aug 2013, Matus UHLAR - fantomas wrote:

Configure your mailer not to filter such spam with SpamAssassin.
I assume they are already filtered by SA on those hosts, aren't they?


On 20.08.13 06:48, John Hardin wrote:
Hazardous assumption. Again, "trusted" means "trusted to not forge 
Received headers", not "trusted to not send spam".


The original request was not to add headers. If the OP trusts those hosts to
provide correct X-Spam headers (and if not, it would hardly be trusted),
there's no need to scan the mail again. Unless we have local BAYES or other
reason to scan the mail locally, they don't need to be scanned.

Yes, I have read your reply to the OP, and I hope he did read the mail and
will consider it.
Maybe I should have replied to your mail to support it...

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The early bird may get the worm, but the second mouse gets the cheese. 


Re: X-Spam headers omission for trusted IPs

2013-08-20 Thread John Hardin

On Tue, 20 Aug 2013, Matus UHLAR - fantomas wrote:


On 19.08.13 19:37, Catalin Constantin wrote:

Is there any setting in spamassassin to make it NOT add the X-Spam headers
for mails which are originating from trusted ips (listed in
trusted_networks) ?


Configure your mailer not to filter such spam with SpamAssassin.
I assume they are already filtered by SA on those hosts, aren't they?


Hazardous assumption. Again, "trusted" means "trusted to not forge 
Received headers", not "trusted to not send spam".


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  We are hell-bent and determined to allocate the talent, the
  resources, the money, the innovation to absolutely become a
  powerhouse in the ad business.   -- Microsoft CEO Steve Ballmer
  ...because allocating talent to securing Windows isn't profitable?
---
 4 days until the 1934th anniversary of the destruction of Pompeii


Re: X-Spam headers omission for trusted IPs

2013-08-20 Thread Matus UHLAR - fantomas

On 19.08.13 19:37, Catalin Constantin wrote:

Is there any setting in spamassassin to make it NOT add the X-Spam headers
for mails which are originating from trusted ips (listed in
trusted_networks) ?


Configure your mailer not to filter such spam with SpamAssassin.
I assume they are already filtered by SA on those hosts, aren't they?

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you. 


Re: X-Spam headers omission for trusted IPs

2013-08-19 Thread John Hardin

On Mon, 19 Aug 2013, Catalin Constantin wrote:


Hello,

Is there any setting in spamassassin to make it NOT add the X-Spam headers
for mails which are originating from trusted ips (listed in
trusted_networks) ?


Bear in mind, trusted networks is "trusted to not forge Received: 
headers", not "trusted to not send spam". Spam can be received from 
networks in trusted_networks.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  North Korea: the only country in the world where people would risk
  execution to flee to communist China.  -- Ride Fast
---
 5 days until the 1934th anniversary of the destruction of Pompeii