Disable Spamfilter on outgoing mails for specific domain

wwweiss · Apr 1, 2026 at 12:09 PM

For one customer several outgoing mails are rejected due to high spam-score. It happens always on Mails he answers in the context of "Bewerbung". Bayers gives 5.1 points and FUZZY_DENIED 3.0. To find out the reason for this high score i need some time. As a quick solution I want to make all outgoing mails from this customer (domain) to be sent without any checking.
if I add the customers domain to the whitelist, it doesn't help, which I already assumed. Is there any way to setup a domain that all outgoing mails (authenticated senders) from this domain are not checked?

till · Apr 1, 2026 at 2:13 PM

There is no setting specific for outgoing emails in ISPConfig. The answers below might help you:

To disable spam scanning for outgoing emails in Rspamd on Debian, you typically don’t turn off Rspamd entirely—you configure it to skip checks for authenticated or local users (i.e., your outgoing mail).

Here are the clean and recommended approaches:

✅ Method 1: Skip scanning for authenticated users (recommended)
Most outgoing mail is sent via SMTP authentication. You can tell Rspamd to trust authenticated users and skip filtering.

1. Edit (or create) a local settings file:
sudo nano /etc/rspamd/local.d/settings.conf

2. Add this block:
authenticated {
priority = high;
authenticated = yes;
apply {
symbols_disabled = ["ALL"];
}
}

What this does:

Matches all authenticated SMTP users

Disables all spam checks (symbols_disabled = ["ALL"])

✅ Method 2: Skip scanning based on IP (e.g., localhost or your mail server)
If your outgoing mail is relayed via localhost or a trusted IP:

outgoing {
priority = high;
ip = ["127.0.0.1", "::1"];
apply {
symbols_disabled = ["ALL"];
}
}

You can also include your server’s internal IP range:

ip = ["127.0.0.1", "::1", "192.168.0.0/16"];

✅ Method 3: Use the groups_disabled option (alternative)
Instead of disabling all symbols, you can disable spam-related groups:

authenticated {
priority = high;
authenticated = yes;
apply {
groups_disabled = ["spam"];
}
}

This is less aggressive than disabling everything.

Restart Rspamd
After changes:

sudo systemctl restart rspamd

Notes & Best Practices

Do NOT disable scanning globally unless you really mean it—it protects your system from abuse.

Outgoing scanning is often useful to:

Prevent compromised accounts from sending spam

Avoid your server getting blacklisted

A safer approach is:

Lower score sensitivity instead of disabling entirely

Or skip only trusted users/IPs (as above)

⚠️ Common Pitfall
If you're using Postfix, make sure:

Outgoing mail is correctly marked as authenticated

Or originates from an IP you included in the rule

Otherwise, the rule won’t match and scanning will still occur.

If you want, tell me your mail setup (Postfix, Exim, Docker, etc.), and I can give a config tailored exactly to your environment.
Click to expand...

wwweiss · Apr 1, 2026 at 4:45 PM

Thank you! Seems that my question to chatGPT was not so good than yours . This answer gives me everything I need. Now I understand the concept and will go with method 1, which is best suited for my demands.

Log in or Sign up

Disable Spamfilter on outgoing mails for specific domain

wwweiss Member HowtoForge Supporter

till Super Moderator Staff Member ISPConfig Developer

wwweiss Member HowtoForge Supporter

Share This Page

Log in or Sign up

Disable Spamfilter on outgoing mails for specific domain

wwweiss Member HowtoForge Supporter

till Super Moderator Staff Member ISPConfig Developer

wwweiss Member HowtoForge Supporter

Share This Page

Useful Searches