Mailing List Archive

Make SpamAssassin use SPF results in an Authentication-Results header?
Hello,

as far as I understand, SpamAssassin can recognise and consume incoming
SPF results in an Authentication-Results or Received-SPF header, so that
it doesn’t have to do its own SPF evaluation.

I’m using SpamAssassin in a milter setup with Postfix, and have an SPF
milter that runs before SpamAssassin and that inserts an
Authentication-Results header with the result. Does SpamAssassin really
use this header? How to make sure? Or what is the configuration that
would enable this?

Thank you.


--
David
Re: Make SpamAssassin use SPF results in an Authentication-Results header? [ In reply to ]
On Wed, 4 Nov 2020 16:18:56 +0100
David Bürgin wrote:

> Hello,
>
> as far as I understand, SpamAssassin can recognise and consume
> incoming SPF results in an Authentication-Results or Received-SPF
> header, so that it doesn’t have to do its own SPF evaluation.
>
> I’m using SpamAssassin in a milter setup with Postfix, and have an SPF
> milter that runs before SpamAssassin and that inserts an
> Authentication-Results header with the result. Does SpamAssassin
> really use this header? How to make sure? Or what is the
> configuration that would enable this?


For this to work the Authentication-Results header needs to be above the
Received header or it's not trusted.