[Rspamd-Users] complete spam analysis in mail header

[Danjel Jungersen]

On 04-10-2024 00:31, Gerald Galster wrote:
>>> i got a mail today with header lines:
>>>
>>> X-Spam-Level: *****
>>> X-Spamd-Bar: +++++
>>>
>>>
>>> I want to have the complete analysis of the spamfilter in the mail header - like spamassassin.
>>>
>>> How can i configure my rspamd?
>> I had a lot of help here:
>> <https://workaround.org/ispmail-bookworm/catching-spam-with-rspamd/>
>
> This article does not take security implications into account.
>
> For details see:https://rspamd.com/doc/modules/milter_headers.html
>
> You might want to avoid exposing this type of information in outbound mails from
> a security point of view ...
>
> https://rspamd.com/doc/modules/milter_headers.html#scan-results-exposure-prevention

You're right, it does not.

But could it be that it is because it is not a problem in the default 
configuration?

The link you refer to has:
"only add headers if the message is *NOT* originated from authenticated 
users or |our_networks"|

|So if I read this correctly, the headers is not added to outbound mails.
Unless one takes "advantage" of the extended_headers_rcpt option.
|

|My own little test to a gmail account confirms this.|

|Or am I mistaken here?
  - I could very well be, I'm very new to postfix/rspamd and all the 
rest.....
  - I've run a mailserver for many years, but on MS until about a month ago.
|

|Best regards
Danjel
|


> Best regards,
> Gerald
-- 
Med venlig hilsen
Danjel Jungersen
Jungersen Grafisk ApS
www.jungersen.dk <https://www.jungersen.dk>
Holsbjergvej 39
2620 Albertslund
Tel: 43 64 10 00
Mobil: 20 42 20 11