Mailbox Spamfilter setting ignored

Hi, on my installation it looks like the "Spamfilter" setting is ignored on (at least) one Mailbox.
I have one Mailbox with Spamfilter = "Wants all spam".
In my Email > Spamfilter Policy I have the default settings for the policy "Wants all spam" in the Rspamd tab:
Greylisting level: 999
SPAM tag level: 999
SPAM tag method: Subject (Adds "***SPAM***" at the beginning)
SPAM reject level: 999

Two days ago that mailbox received an e-mail and that e-mail was marked as spam and sent to the Junk folder.
Inside the e-mail body I can see:

Code:

X-Spamd-Result: default: False [12.14 / 15.00];
        BAYES_SPAM(5.10)[99.99%];
        REPLYTO_EQ_TO_ADDR(5.00)[];
        SPOOF_DISPLAY_NAME(3.00)[bookingexpert.org,roma2b.it];
        RCVD_UNAUTH_PBL(2.00)[];
        ..........other rows removed.........
X-Spamd-Bar: ++++++++++++
X-Spam-Level: ************
X-Rspamd-Action: add header
X-Spam-Status: Yes, score=12.14
X-Rspamd-Server: m11
X-Rspamd-Queue-Id: 9C46D13E40670
X-Spam: Yes

Also, the Subject of the received e-mail was not changed.

This is what I find on /var/log/mail.log about this incoming e-mail:

Code:

2024-06-02T13:59:25.303591+02:00 m11 postfix/smtpd[1935892]: connect from maildns01.nexteam.it[185.56.10.124]
2024-06-02T13:59:25.640200+02:00 m11 postfix/smtpd[1935892]: 9C46D13E40670: client=maildns01.nexteam.it[185.56.10.124]
2024-06-02T13:59:25.646732+02:00 m11 postfix/cleanup[1940545]: 9C46D13E40670: message-id=<[email protected]>
2024-06-02T13:59:26.218299+02:00 m11 postfix/qmgr[687378]: 9C46D13E40670: from=<[email protected]>, size=32194, nrcpt=1 (queue active)
2024-06-02T13:59:26.218568+02:00 m11 postfix/smtpd[1935892]: disconnect from maildns01.nexteam.it[185.56.10.124] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
2024-06-02T13:59:26.223623+02:00 m11 dovecot: lmtp(1940556): Connect from local
2024-06-02T13:59:26.510743+02:00 m11 dovecot: lmtp([email protected])<1940556><sKZGDZ5eXGZMnB0A2IIbnw>: sieve: msgid=<[email protected]>: fileinto action: stored mail into mailbox 'Junk'
2024-06-02T13:59:26.511215+02:00 m11 dovecot: lmtp(1940556): Disconnect from local: Logged out (state=READY)
2024-06-02T13:59:26.511630+02:00 m11 postfix/lmtp[1940555]: 9C46D13E40670: to=<[email protected]>, relay=m11.itala.net[private/dovecot-lmtp], delay=1.2, delays=0.9/0.01/0/0.29, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> sKZGDZ5eXGZMnB0A2IIbnw Saved)
2024-06-02T13:59:26.511741+02:00 m11 postfix/qmgr[687378]: 9C46D13E40670: removed

Any hint in order to investigate this?
Thanks, Claudio

 

Hi @till we are using ISPConfig 3.2.11 on a multi-server configuration. The server where this happens is not the master server.
However, the slave server seems to have correct data. Here's an excerpt from the slave server, table spamfilter_users:

The mailbox is the one listed there.
The email was sent to a Mailbox address, not an alias.

 

Check the /var/log/rspamd/rspamd.log for the mail in question.
Is the user configuration present at /etc/rspamd/local.d/users/?