[Mimedefang] Questions on Received, stream_by_recipient, and SpamAssassin

[Kelson Vibber]

A few months ago there was a discussion about the latest Received header 
not existing yet when MIMEDefang calls SpamAssassin, causing it to miss out 
on a lot of useful header tests.  As a result, the next version of MD would 
synthesize the header when calling SA.

My question is: if you have used stream_by_recipient or resend_message, and 
you have an IP validation key, does MD use the "real" relay as mentioned in 
X-MIMEDefang-Relay... to reconstruct this, or does it use localhost?

It would be nice to have this in the actual message as well, for people who 
want to track down the source of the spam - as it is, there's a missing 
relay in the list of Received: headers, and if it only originated one hop 
away, the source is invisible.

(On a related note, I'm not using either add_ip_validation_header or 
delete_ip_validation_header in the actual filter; my understanding is that 
the various stream_by functions use it automatically if the key is present, 
and I do see the headers being deleted in my logs - but occasionally a 
message will come through that still has the header present.  Any ideas why 
this might be happening?)

Thanks!


Kelson Vibber
SpeedGate Communications <www.speed.net>