milter messages marked as ALL_TRUSTED

[Matus UHLAR - fantomas]

>>>>>>>Can you advise me easy way to log e.g. Received: headers from amavisd-new
>>>>>>>or a hint, what more to log?

>>>>>On 20.04.20 23:22, Damian wrote:
>>>>>>Run amavis with debug-sa parameter and egrep for "tag RELAY|trusted". Do
>>>>>>you see obvious differences between the two systems?

>>>>On Tue, Apr 21, 2020 at 05:32:01PM +0200, Matus UHLAR - fantomas wrote:
>>>>>no differences for now, but you helped me at least a bit.
>>>>>Because of reason unknown to me yet, mail is tagged as originating:

>>>2. my problem is that amavis does set "orgiginating" flag for mails that are
>>>not originating
>
>On 22.04.20 12:46, Henrik K wrote:
>>The patch also fixes this case.  Don't read too much into the bug
>>description, you need to understand what the code actually does.  It also
>>sets originating=0, which didn't happen with the missing code.

On 22.04.20 11:57, Matus UHLAR - fantomas wrote:
>I don't manipulate the "originating" flag at all, so there must be something
>that sets it when not needed.
>
>I was trying to understand the code but there's much of code so I asked
>people who might already know better
>
>I believe that "originating" flag should only be set when the mail was
>submitted. Otherwise, standard TrustPath mechanism should be used.

On 22.04.20 12:55, Henrik K wrote:
>Anyways, it's hard to help further without complete picture of your
>configuration, I guess there's many ways policy banks and stuff could mess
>it up.

the only place I set "originating" is the "MYNETS" (where it's default
anyway) and the problem behaviour was happening even before set MYNETS.

The only bank used in this case is "AM.PDP" where "originating", 


I found so far some places where originating seems to be set:

sub preprocess_policy_query($$) {
...
  $msginfo->originating(1);
...


and also this one which should not be used:

sub msg_from_quarantine($$$) {
...
  $msginfo->originating(1);  # (also enables DKIM signing)
...

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)