search

spamhaus / rspamd-dqs

Spamhaus code for RSPAMD Plugin. See https://docs.spamhaustech.com/40-real-world-usage/Rspamd/000-intro.html for instructions
Apache License 2.0
61 stars 11 forks source link

ip address present in XBL got 2 different scores #10

Open danielemelosi opened 4 years ago

danielemelosi commented 4 years ago

Based on the code and based on our tests if an ip address is present in XBL the message receive 2 scores (7 for SPAMHAUS_ZEN and 5 for URIBL_XBL): our test: $ cat swaks.eml To: test@mydomain.tld From: test@mydomain.tld Subject: test Rspamd Fri, 29 May 2020 X-Mailer: swaks v20181104.0 jetmore.org/john/code/swaks/

This is a test mailing $ rspamc -i 173.0.81.1 < ./swaks.eml "X-Spamd-Result": "default: True [14.90 / 10.00] rnt SPAMHAUS_ZEN(7.00)[173.0.81.1:from] rnt URIBL_XBL(5.00)[173.0.81.1:from]", [cut]

from the code both use the same rbl:

spamhaus_from { from = true; received = false; rbl = "your_DQS_key.zen.dq.spamhaus.net"; [cut]

"SPAMHAUS_ZEN_URIBL" { resolve_ip = true; replyto = true; emails = true; emails_domainonly = true; rbl = "your_DQS_key.zen.dq.spamhaus.net";

we've temporary solved by adding a from = false; in SPAMHAUS_ZEN_URIBL rbl definition

ricalfieri commented 4 years ago

Hi. Thanks for the report, I'm investigating