[Mimedefang] strange (?) header messages in maillog

[alan premselaar]

hi,

 lately i've been seeing a lot of the following:

Mar 20 16:52:18 mail1 sendmail[5644]: h2K7qELu005644: Milter change: header
X-Spam-Score: from 3.5 / 6.0: 58.3% to 3.5 / 6.0: 58.3%
Mar 20 16:52:18 mail1 sendmail[5644]: h2K7qELu005644: Milter change: header
X-Spam-Tests: from HGH,NO_REAL_NAME to HGH,NO_REAL_NAME
Mar 20 16:52:18 mail1 sendmail[5644]: h2K7qELu005644: Milter change: header
X-Spam-Disposition: from Suspected to Suspected

messages in my maillog.

i'm running Sendmail 8.12.8 , MIMEDefang 2.30 and Spamassassin 2.50

i'm using a slightly modified version of the contrib/linuxorg filter

(modifications include md_log calls, check for suspicious chars and support
for error messages in japanese and english)

no modifications should have changed the basic functionality of the filter


I'm a little puzzled because if i'm reading this right, the message has
already had the headers applied and now it's changing the headers to be
exactly the same as they were, yet there's not corresponding syslog entry to
show that the headers were placed in the first place.

One thing i noted is that in a previous post someone mentioned that the
Spamassassin scan should take place in filter_end().  in this script it's
taking place in filter_begin() and i'm not entirely sure what the difference
is, or what kind of impact one has over the other.

I've read thru the online HOWTO a few times but i'm still a little fuzzy on
this issue.

as always, any and all assistance is greatly appreciated.


thanks

alan