On 6 Apr 2021, at 14:55, Steve Dondley wrote:
On 2021-04-06 02:32 PM, Bill Cole wrote:
PLEASE NOTE:
I read the mailing list obsessively and DO NOT NEED (or want) the
extra copies sent when you send both to me and to the list.
Sorry, I still haven't figured out how to properly respond. When I hi
"reply all" it cc's the list and sends to you. When I hit just "reply"
it only sends to you. I've manually deleted you from the "To" box and
sending it directly to the list here. Hopefully that fixes things up.
It seems to have done so. Thank you.
Some MUAs have a "Reply to List" function that uses the List-Post header
(and sometimes heuristics when that header is missing) to send replies
only to a list itself.
Since the scores being added during delivery are much richer,
detecting enough info to do SPF and DKIM analysis, I am 99.9% certain
that the format of 'some_email' is mangled, probably missing critical
headers or using CR linebreaks instead of proper LFs.
Hmm, this is on a linux box, so I'm not sure how it could be screwing
up the line breaks. Is it possible that when spamd injects the scores
before the body of the email, it is screwing things up?
Here is email as it sits in my inbox now, which is after it gets
processed by spamd. I was under the impression that an email that had
already been processed by SA could be processed again and it would
ignore any modifications made by earlier passes through SA.
It can only do so if report_safe is set to 0. With non-zero report_safe
settings, the original mail is encapsulated as an attachment inside a
wrapper message also including the report. That wrapper message
containing the SA report is "safe" because it is fully local, the
text/plain part won't look like spam to any spam filter, and the
original, encapsulated as a message/rfc822 attachment, should be skipped
by any filter. If you want to test the *original* message, you have to
extract the message/rfc822 part into its own file and test that.
So these are the headers you were checking post-delivery:
Return-Path:
<bounce-use=m=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com>
Delivered-To: s...@exmaple.com
Received: from email.exmaple.com
by email.exmaple.com with LMTP
id kAhSKc1dY2BCKgAAB604Gw
(envelope-from
<bounce-use=m=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com>)
for <s...@exmaple.com>; Tue, 30 Mar 2021 13:20:13 -0400
Received: by email.exmaple.com (Postfix, from userid 115)
id A64BE200C8; Tue, 30 Mar 2021 13:20:13 -0400 (EDT)
Received: from localhost by email.exmaple.com
with SpamAssassin (version 3.4.2);
Tue, 30 Mar 2021 13:20:13 -0400
From: "Home Warranty - AHS" <s...@forgetmassives.com>
To: <steveexma...@comcast.net>
Subject: *****SPAM***** It's getting warmer, are you covered?
Date: Tue, 30 Mar 2021 05:18:34 -0700
Message-Id: <B3.BE.10603.49D53606@emsmta18>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
email.exmaple.com
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.2 required=5.0 tests=BAYES_99,BAYES_999,
DATE_IN_PAST_03_06,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
HTML_IMAGE_RATIO_02,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H2,
SPF_HELO_NONE,SPF_SOFTFAIL shortcircuit=no autolearn=no
autolearn_force=no version=3.4.2
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------=_60635DCD.A0F5D194"
[...]
but this is the original header block buried in the attachment:
Received-SPF: Softfail (mailfrom) identity=mailfrom;
client-ip=69.252.207.38; helo=resqmta-ch2-06v.sys.comcast.net;
envelope-from=bounce-use=m=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com;
receiver=<UNKNOWN>
Authentication-Results: email.exmaple.com;
dkim=pass (2048-bit key; secure)
header.d=comcastmailservice.net header.i=@comcastmailservice.net
header.b="YTHf56Fx";
dkim=pass (1024-bit key; unprotected)
header.d=forgetmassives.com header.i=@forgetmassives.com
header.b="Cc3SOvHE";
dkim-atps=neutral
Received: from resqmta-ch2-06v.sys.comcast.net
(resqmta-ch2-06v.sys.comcast.net [69.252.207.38])
by email.exmaple.com (Postfix) with ESMTPS id F0A9D200C8
for <s...@exmaple.com>; Tue, 30 Mar 2021 13:20:12 -0400 (EDT)
Received: from resomta-ch2-06v.sys.comcast.net ([69.252.207.102])
by resqmta-ch2-06v.sys.comcast.net with ESMTP
id RCA7l3lgvsjoSRI2ElIKl6; Tue, 30 Mar 2021 17:20:10 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=comcastmailservice.net; s=20180828_2048; t=1617124810;
bh=EzUwkxtc+07gV+1cIeMVwIqhGkZuGI/a4ukUrCjG7nM=;
h=Received:Received:Received:Received:Received:Received:Received:
Message-ID:Date:From:Reply-To:To:Subject:Mime-Version:
Content-Type;
b=YTHf56FxVyphxJLrqEnfZKfP5M62QfSc0ICCe5ZS/2UXQUsumO0ltgCO6ZjDRxrso
Up8oEgr4gqv8kNMAtJEM532f15eLObwwty+P0OAS8HncjfsiHJspdnk3Eg0aC4A57k
5w8gnpRbQoa/KaAn0bejQNcCdr+KArf6VwKO+q5/HY9UQxa2RxIWUsoxIMmyZX0WpF
upTL1nKnd+zaRENmudAllcfxCLMUpnc9oK/Ea//4bcT/51ofrewbe/J0ZhaAUfJu5O
/40UsSsWx49VFVQ1X7Bifw/CE56spoesfnOSm9/7W/V0PptjjleM6LIQ3S+xWRJFaS
xfwTExYFqt5sw==
Received: from dovback2-asa-09o.email.comcast.net ([96.118.48.40])
by resomta-ch2-06v.sys.comcast.net with ESMTP
id RI2Dlb2J4RxAFRI2EldEBV; Tue, 30 Mar 2021 17:20:10 +0000
X-Xfinity-VAAS:
gggruggvucftvghtrhhoucdtuddrgeduledrudeitddgudduvdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucevohhmtggrshhtqdftvghsihdpqfgfvfdppffquffrtefokffrnecuuegrihhlohhuthemuceftddunecundfotefknffkpffiucdludejmdenucfjughrpefkfffhrhfvuffjgggtsegrtderredttdejnecuhfhrohhmpedfjfhomhgvucghrghrrhgrnhhthicuqdcutefjufdfuceoshgvnhgusehfohhrghgvthhmrghsshhivhgvshdrtghomheqnecuggftrfgrthhtvghrnhepfeefffetveetheffvdfgieeuueehleffleeghfeuudffgeejhfeugfffgfeufeejnecuffhomhgrihhnpegslhhuvghhohhrnhgvthdrtghomhenucfkphepleeirdduudekrdegkedrgedtpdeijedrvdduiedrvddvgedrgedtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghlohepughovhgsrggtkhdvqdgrshgrqddtlehordgvmhgrihhlrdgtohhmtggrshhtrdhnvghtpdhinhgvthepleeirdduudekrdegkedrgedtpdhmrghilhhfrhhomhepsghouhhntggvqdhushgvpehmpeeggeeikedvjeefgeekfeeipegvtghhohegpeeiughftdgrkegtudeivdgtuggtvdekuddtuggtkegsgehfvgdtrgduudelkedujeesrhgvthhurhhnphgrthhhrdgslhhuvghhohhrnhgvthdrtghomhdprhgtphhtthhopehsseguohhnughlvgihrdgtohhm
X-Xfinity-CCat: promotional
X-Xfinity-VMeta: sc=17.00;st=mce
X-Sieve: Pigeonhole Sieve 0.5.12 (f22f7ab3)
X-Sieve-Redirected-From: steveexma...@comcast.net
Delivered-To: steveexma...@comcast.net
Received: from dovdir2-asa-02o.email.comcast.net ([69.252.207.53])
by dovback2-asa-09o.email.comcast.net with LMTP
id 6GaMGsZdY2AmPwAAmOiKAQ
(envelope-from
<bounce-use=m=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com>)
for <steveexma...@comcast.net>; Tue, 30 Mar 2021 17:20:06
+0000
Received: from dovpxy-asb-13o.email.comcast.net ([69.252.207.53])
by dovdir2-asa-02o.email.comcast.net with LMTP
id iGWMF8ZdY2AdXwAAq9RwVw
(envelope-from
<bounce-use=m=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com>)
for <steveexma...@comcast.net>; Tue, 30 Mar 2021 17:20:06
+0000
Received: from resimta-ch2-34v.sys.comcast.net ([69.252.207.53])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
(256/256 bits))
by dovpxy-asb-13o.email.comcast.net with LMTPS
id yLhCFMZdY2D5eQAAV/MBng
(envelope-from
<bounce-use=m=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com>)
for <steveexma...@comcast.net>; Tue, 30 Mar 2021 17:20:06
+0000
Received: from smtp.liberal.bluehornet.com ([67.216.224.40])
by resimta-ch2-34v.sys.comcast.net with ESMTP
id RI22lqxlK2vXGRI29lQ6xW; Tue, 30 Mar 2021 17:20:06 +0000
X-Xfinity-Message-Heuristics: IPv6:N;TLS=1;SPF=1;DMARC=
Authentication-Results: resimta-ch2-34v.sys.comcast.net;
dkim=pass header.d=forgetmassives.com
header.i=@forgetmassives.com
header.b=Cc3SOvHE
X-MSFBL:
c3RldmVkb25kbGV5QGNvbWNhc3QubmV0QGJlcm5hcmRfbGliZXJhbEBiZXJuYXJk
QGJvdW5jZS11c2U9TT00NDY4MjczNDgzNj1lY2hvND02REYwQThDMTYyQ0RDMjgx
MERDOEI0RkUwQTExOTgxNw==
DKIM-Signature: v=1; a=rsa-sha256; d=forgetmassives.com; s=s1024-1.bh;
c=simple/simple;
q=dns/txt; i=@forgetmassives.com; t=1617124756;
h=From:Subject:Date:To:Mime-Version:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;
bh=v0lCvbtRqApG1XU1/ouMo37AJee75nZOebhHsT2gjbw=;
b=Cc3SOvHEcyP4NtvbU8vbw/j8DZPj9Cyd5Aw6l3XX1J8YDiJ/qk2Im4rmgzw7eBIz
cjwPM9nPlEG30CU7033+PruH+O/lL5Es5TDUXBICgEJ8MzAFSS6FBz/J2dfygBLw
NnSJvpGkQG8f/M1CQW4DpF5+cB9yBlE2+c+heD8vEeA=;
Received: from [172.16.9.190] ([172.16.9.190:44982]
helo=localhost.localdomain)
by returnpath.bluehornet.com (envelope-from
<bounce-use=M=44682734836=echo4=6df0a8c162cdc2810dc8b4fe0a119...@returnpath.bluehornet.com>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTP
id B3/BE-10603-49D53606; Tue, 30 Mar 2021 10:19:16 -0700
Message-ID: <B3.BE.10603.49D53606@emsmta18>
Date: Tue, 30 Mar 2021 05:18:34 -0700
From: "Home Warranty - AHS" <s...@forgetmassives.com>
Reply-To: s...@forgetmassives.com
To: <steveexma...@comcast.net>
X-Outgoing: bernard
Subject: It's getting warmer, are you covered?
List-Unsubscribe:
<mailto:unsub-44682734836-echo4-6df0a8c162cdc2810dc8b4fe0a119...@listunsub.bluehornet.com>
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="--6063171a83296-MultiPart-Mime-Boundary"
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
