Mailing List Archive

List for new/novice users of all SpamAssassin headers that can appear with descriptions for understanding?...
Thank you Martin Gregorie!

Looking for the closest thing to a list for new/novice users of all
SpamAssassin headers that can appear with descriptions for understanding
the data that can appear at each SpamAssassin header.

It's for new/novice users' curiosity about understanding better the data
in each SpamAssassin header that can appear in messages' headers.


> On Wed, 2019-01-30 at 15:24 -0500, Don Saklad wrote:
>> Re: What's available to interpret spamassassin headers?


Martin Gregorie <martin@gregorie.org> writes:
> Why do you want to interpret them?
>
> Once we know that we may be able to provide more sensible answers, but
> in its absence all I can say is awk, C, and Perl.
>
> Here's what I use each for:
> - C: a program that looks at messages returned by spamc and decides
> whether its ham (which is passed to my internal MTA for delivery)
> or spam (which is quarantined). It only needs to look at the
> spam/notspam flag but is handling complete mail messages
>
> - Perl: a module run by logwatch which scans maillogs to generate a
> report on the ham and spam seen the previous day
>
> - awk: a script which scans maillogs to analyse spamd performance.
>
> - bash scripts: sometimes combined with grep, provide tools that make
> SA rule development easier.
>
> Martin
Re: List for new/novice users of all SpamAssassin headers that can appear with descriptions for understanding?... [ In reply to ]
On 30 Jan 2019, at 20:33, Don Saklad wrote:

> Thank you Martin Gregorie!
>
> Looking for the closest thing to a list for new/novice users of all
> SpamAssassin headers that can appear with descriptions for
> understanding
> the data that can appear at each SpamAssassin header.

This is not really possible.

Run 'perldoc Mail::SpamAssassin::Conf' and read the description of the
add_header directive and the TEMPLATE TAGS section. This will explain
some of the information from SA that can appear in headers.

> It's for new/novice users' curiosity about understanding better the
> data
> in each SpamAssassin header that can appear in messages' headers.

Depending on how you hook SA into your mail system and how it is
configured, messages can have no headers generated by SA ever or any
arbitrary header with a name that starts with "X-Spam-" containing a
wide range of information available to SA in arbitrary formats defined
by the local configuration. Beyond the headers that can be generated by
SA itself, some mechanisms for integrating SA are commonly configured to
add their own headers of their own design containing SA information.

For example, the widely-used cPanel/WHM server management software uses
a custom configuration for Exim (the MTA it uses) which mimics the SA
X-Spam-Report, but does not quite match it. Why? I don't know.



--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole