search

Mailu / Mailu

Insular email distribution - mail server as Docker images
https://mailu.io
Other
5.84k stars 831 forks source link

mailu/rspamd: WHITELIST_* symbols not used in scoring chain #1507

Closed omitrowski closed 4 years ago

omitrowski commented 4 years ago

Hi!

trying to use whitlisying symbols in scoring procedure, but it looks like it does not work. The symbols I never see in history:

FROM_NEQ_ENVFROM (2.77) [foo@domain.com]
HTML_SHORT_LINK_IMG_1 (2)
MANY_INVISIBLE_PARTS (0.05) [1]
ARC_NA (0)
REPLYTO_ADDR_EQ_FROM (0)
FORGED_SENDER_VERP_SRS (0)
RCPT_COUNT_ONE (0) [1]
RCVD_COUNT_ZERO (0) [0]
TO_DN_NONE (0)
HAS_REPLYTO (0) [foo@domain.com]
FROM_HAS_DN (0)
TO_MATCH_ENVRCPT_ALL (0)
MIME_TRACE (0) [0:~]

I added a domain to the whitelists maps where I am able to send mails from and I expected to down score using the whitelists symbols.

My config: /var/lib/rspamd/dynamic:

[
    {
        "metric": "default",
        "actions": [
            {
                "name": "reject",
                "value": 3.300000
            },
            {
                "name": "rewrite subject",
                "value": 3.0
            },
            {
                "name": "add header",
                "value": 2.500000
            },
            {
                "name": "greylist",
                "value": 2.0
            }
        ],
        "symbols": [
            {
                "name": "R_DKIM_REJECT",
                "value": 5.0
            },
            {
                "name": "DMARC_POLICY_REJECT",
                "value": 15.0
            },
            {
                "name": "DWL_DNSWL_BLOCKED",
                "value": 5.0
            },
            {
                "name": "URIBL_BLOCKED",
                "value": 5.0
            },
            {
                "name": "PHISHED_OPENPHISH",
                "value": 15.0
            },
            {
                "name": "HACKED_WP_PHISHING",
                "value": 15.500000
            },
            {
                "name": "PHISHED_PHISHTANK",
                "value": 15.0
            },
            {
                "name": "PHISHING",
                "value": 15.0
            },
            {
                "name": "PH_SURBL_MULTI",
                "value": 15.0
            },
            {
                "name": "ARC_INVALID",
                "value": 2.0
            },
            {
                "name": "ARC_REJECT",
                "value": 2.0
            },
            {
                "name": "DMARC_POLICY_SOFTFAIL",
                "value": 1.0
            },
            {
                "name": "NEURAL_SPAM",
                "value": 5.0
            },
            {
                "name": "FROM_DN_EQ_ADDR",
                "value": 0.500000
            },
            {
                "name": "FROM_EXCESS_QP",
                "value": 1.500000
            },
            {
                "name": "URI_COUNT_ODD",
                "value": 1.444000
            },
            {
                "name": "PRECEDENCE_BULK",
                "value": 1.555000
            },
            {
                "name": "FORGED_SENDER",
                "value": 0.553000
            },
            {
                "name": "FAKE_REPLY",
                "value": 2.221000
            },
            {
                "name": "DKIM_SIGNED",
                "value": -7.500000
            },
            {
                "name": "LOCAL_FUZZY_DENIED",
                "value": 30.012000
            },
            {
                "name": "FROM_NEQ_ENVFROM",
                "value": 2.770000
            },
            {
                "name": "PREVIOUSLY_DELIVERED",
                "value": -2.220000
            },
            {
                "name": "ZERO_FONT",
                "value": 3.331000
            },
            {
                "name": "HAS_PHPMAILER_SIG",
                "value": 2.220000
            },
            {
                "name": "HAS_LIST_UNSUB",
                "value": 1.250000
            },
            {
                "name": "SUBJECT_ENDS_SPACES",
                "value": 0.775000
            },
            {
                "name": "MIME_HTML_ONLY",
                "value": 0.442000
            },
            {
                "name": "XM_UA_NO_VERSION",
                "value": 0.551000
            },
            {
                "name": "FREEMAIL_FROM",
                "value": 0.0
            },
            {
                "name": "FROM_EQ_ENVFROM",
                "value": 0.0
            },
            {
                "name": "REPLYTO_DOM_EQ_FROM_DOM",
                "value": -0.440000
            },
            {
                "name": "REPLYTO_ADDR_EQ_FROM",
                "value": 0.0
            },
            {
                "name": "TO_DN_ALL",
                "value": -0.440000
            },
            {
                "name": "FREEMAIL_ENVFROM",
                "value": -4.440000
            },
            {
                "name": "REPLYTO_DOM_NEQ_FROM_DOM",
                "value": 2.220000
            },
            {
                "name": "HAS_INTERSPIRE_SIG",
                "value": 1.220000
            },
            {
                "name": "MID_RHS_MATCH_FROM",
                "value": -6.660000
            },
            {
                "name": "R_UNDISC_RCPT",
                "value": 9.330000
            },
            {
                "name": "HAS_XOIP",
                "value": -1.110000
            },
            {
                "name": "ARC_SIGNED",
                "value": -5.0
            },
            {
                "name": "MID_RHS_NOT_FQDN",
                "value": 1.205000
            },
            {
                "name": "CTYPE_MIXED_BOGUS",
                "value": 9.991000
            },
            {
                "name": "FORGED_MUA_THUNDERBIRD_MSGID_UNKNOWN",
                "value": 3.500000
            },
            {
                "name": "ARC_ALLOW",
                "value": -10.0
            },
            {
                "name": "WHITELIST_DKIM",
                "value": -20.0
            },
            {
                "name": "WHITELIST_SPF_DKIM",
                "value": -20.0
            },
            {
                "name": "WHITELIST_DMARC",
                "value": -20.0
            },
            {
                "name": "WHITELIST_SPF",
                "value": -20.0
            }
        ]
    }
]

Any idea what I am doing wrong?

dskrzypczak commented 4 years ago

+1 I have te same issue...

Nebukadneza commented 4 years ago

Hi There,

The Mailu-Project is currently in a bit of a bind! We are short on man-power, and we need to judge if it is possible for us to put in some work on this issue.

To help with that, we are currently trying to find out which issues are actively keeping users from using Mailu, which issues have someone who want to work on them — and which issues may be less important. These a less important ones could be discarded for the time being, until the project is in a more stable and regular state once again.

In order for us to better assess this, it would be helpful if you could put a reaction on this post (use the :smiley: icon to the top-right).

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Diman0 commented 4 years ago

Hi There,

we see this issue had only little attention 😟. As much as it pains us: In order to get the current issues a bit more manageable for us, we decided to close it. 👋👋

We hope that no one feels offended by doing so. Should the issue get really pressing in the future, please feel free to re-open it.

Thank you for your patience and understanding, 🙇

p.s. for rspamd user support you are probably better of on the rspamd website https://rspamd.com/support.html