[vexim] Changing the SA config

[Adam Sweet]

Aaron Eldridge wrote:
> Hi guys,
>           I am very new to linux and exim so I apologise for any massive 
> noobness. I've setup a server using ubuntu 8.04 server, exim4, dovecot, 
> clamav and SA. All seams to be working well and nicely I've sent mails 
> that contained test virus signatures and would flag as spam and this 
> worked (well spam headers/report were added). I then wanted to change 
> SA's config to alter the subject of spam mails.
> 
> To do this I edited /etc/spamassassin/local.cf to have rewrite_header 
> Subject *****SPAM***** I then promptly restarted the spamd and exim4 for 
> good measure and tried again. Again the message got the headers flagging 
> it as spam but the subject of the message was not changed. So that didnt 
> work so I then tried doing exactly the same thing with my 
> /mail/.spamassassin/user_prefs to exactly the same thing. Restarted the 
> daemons tried again, once again the mail had the spam headers but the 
> subject isnt changed. So what I would ask is where on earth do I edit this?

Hi

First of all, see if you have the following in your
/etc/exim4/exim4.conf (yours may be called exim4.template if you copied
the Vexim exim config file over your Ubuntu supplied one or configure if
you just copied it in from the Vexim tarball):

# This setting allows exim to rewrite subject headings using the
specified file

system_filter = /var/spool/exim4/.filter

Check you have the following in vexim-acl-check-content.conf:

# Always add X-Spam-Score and X-Spam-Report headers, using SA
# system-wide settings
# (user "nobody"), no matter if over threshold or not.
  warn  message                = X-Spam-Score: $spam_score ($spam_bar)
       !authenticated  = *
       spam            = maildeliver:true
  warn  message                = X-Spam-Report: $spam_report
        !authenticated = *
        spam            = maildeliver:true
  accept hosts         = 127.0.0.1:+relay_from_hosts
  accept authenticated = *
  warn message         = X-New-Subject: *****POSSIBLE SPAM***** $h_subject
        !authenticated = *
        condition      = ${if >{$spam_score_int}{45}{1}{0}}
       spam            = maildelivery:true

I forget how far my ACLs have been modified from the originals, I think
I added the bit to allow mail from authenticated users (ie our own
users) as allowing authenticated users at the top of the Vexim ACL file
wasn't working for me.

Now create a file called .filter in your Exim user's home directory. On
Debian and Ubuntu this seems to be /var/spool/exim4/.

In this file paste:

if "${if def:header_X-Virus: {there}}" is there
then
    headers remove Subject
    headers add "Subject: $h_X-Virus:"
    headers remove X-Virus
endif

if "${if def:header_X-New-Subject: {there}}" is there
then
    headers remove Subject
    headers add "Subject: $h_X-New-Subject:"
    headers remove X-New-Subject
endif

Restart exim and that should be job done. I originally took these
instructions from the Vexim wiki around 3 years ago and that page
appears to have been modified quite a bit since then, so perhaps you
should check out those instructions to see if they are better than mine:

http://veximwiki.silverwraith.com/index.php/Marking_Subject_of_SPAM

Regards,

Adam Sweet