Hey, ispconfig multiserver, debian 12, ver 3.2.11p2 I get a marketing email from a valid source. It keeps going to spam. I have added spam learning based on move from spam to inbox = ham, move from inbox to spam = spam. headers of the email Code: Return-Path: <bounces+9881061-a977-dave=tlsystems.co.uk@em7814.gavelauctioneers.com> Delivered-To: [email protected] Received: from mx1.tlwebservices.co.uk by mx1.tlwebservices.co.uk with LMTP id MBPCE9/vIGal9wMAyW+1Gw (envelope-from <bounces+9881061-a977-dave=tlsystems.co.uk@em7814.gavelauctioneers.com>) for <[email protected]>; Thu, 18 Apr 2024 11:03:11 +0100 Received: from o1.ptr6163.gavelauctioneers.com (o1.ptr6163.gavelauctioneers.com [149.72.177.4]) by mx1.tlwebservices.co.uk (Postfix) with ESMTPS id 3B84E582A9D for <[email protected]>; Thu, 18 Apr 2024 11:03:09 +0100 (BST) Authentication-Results: mx1.tlwebservices.co.uk; dkim=fail ("headers rsa verify failed") header.d=gavelauctioneers.com header.s=s1 header.b=eZrofVdJ; spf=pass (mx1.tlwebservices.co.uk: domain of "bounces+9881061-a977-dave=tlsystems.co.uk@em7814.gavelauctioneers.com" designates 149.72.177.4 as permitted sender) smtp.mailfrom="bounces+9881061-a977-dave=tlsystems.co.uk@em7814.gavelauctioneers.com"; dmarc=none Arc-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=tlsystems.co.uk; s=default; t=1713434590; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:list-unsubscribe:list-unsubscribe-post: dkim-signature; bh=cyzo5+KxapX3bcnADL0Op++JywFvQBvk5Q1pP+jC/kY=; b=dX9MvJbFsyN1XbJOYdkf0No5hrJcdnFXjrfYwzcR2/tZmHpp2Dh4NceogHIOSDjgJ0ACrj 5MBeMjWUVp/HpT15SFwcuvBwslSF+YEJa311VpJ1QJKXYhGQ0s4KjPNzInEfaJi+M4sOjp IMoMqQ5cXz/IbLJY+1YeHoKUqln0afdtwoCPvoK01ShV/skDVhEq7u7lVY+HNmrltY7h0R 3735uJ5A/Zo94ZRJ9gw4KGCcq0EnDyqgDF4je3m+b1QWZtcyBq3AfkmWYUmnu7ssTRtHva YRFixUr7jiGGt1nlUbLhLYtLnpqnF2RxFbuiRDQsafcqUWhIoCzEyJMDjsKMZg== Arc-Authentication-Results: i=1; mx1.tlwebservices.co.uk; dkim=fail ("headers rsa verify failed") header.d=gavelauctioneers.com header.s=s1 header.b=eZrofVdJ; spf=pass (mx1.tlwebservices.co.uk: domain of "bounces+9881061-a977-dave=tlsystems.co.uk@em7814.gavelauctioneers.com" designates 149.72.177.4 as permitted sender) smtp.mailfrom="bounces+9881061-a977-dave=tlsystems.co.uk@em7814.gavelauctioneers.com"; dmarc=none Arc-Seal: i=1; s=default; d=tlsystems.co.uk; t=1713434590; a=rsa-sha256; cv=none; b=EIN4E4RkAcZw7Kuvq/EG577vgWOpORRja3YjNYIcwQapnCTbjv3MxNDEcLtOcGR0RoEvNj PGJxY8DljdQskVckwFl63k60uTXiFL5JPVtOnQRIKTbzIlRneN9Rr7YHCmoy/WNXHk+iyu b4XzZnwqIk7VD83bRiy/n1c1kCroApWDPfx7hci4VuVV+XDZ4nhF657oWb1DrHGosyOgBb hH07vAz2Ht83BOm/OOCo2mf+/p0O9+ngiEqeEyfPoy+JHw1E/awZx+yLTJf/vlIaWwXE6d mN/I6/fszHhTkAkXR7ZqXg9fuPNKW1GQyfP9QY8vZAjkcE+VlZUSbJp8jQtBHQ== Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gavelauctioneers.com; h=content-type:from:mime-version:subject:reply-to:to:list-unsubscribe: list-unsubscribe-post:cc:content-type:from:subject:to; s=s1; bh=cyzo5+KxapX3bcnADL0Op++JywFvQBvk5Q1pP+jC/kY=; b=eZrofVdJPhUIGNhRUIG72nNp3peafK86MlkiF0pIibzP4xyIFHZG4pDMiKgZnIhSYChE FN7EFMHn9TjeXZRtne+i+jnohBdqQV9/uYqWR7yvKNWDsUiOfr36jocGJzzj1H5BhxClfd Kqzr8oC7yhuU8gkQ5LEEAzv3gI+Ql7KBDwXoErkwqQlhxDK/86/cY5p3zRluROii+Hl8uW ymn4J1P78BIygjcZN+qklST2nwCd80DEfUtLLLQheEhVEaSb3jBeOSalz9bVFLmivfYwdS jfdzCdMVQC7Rpr/138C28JmaVHWXUNcttwbn+9WU8dp29sAQSA9aYb/DSbZAqEJg== Content-Type: multipart/alternative; boundary=6ef94d164ca1dd0ffd8f778d67a22f14c68543b7e5bca52e6587b1706ee6 Date: Thu, 18 Apr 2024 10:03:07 +0000 (UTC) (18/04/24 11:03:07) From: Gavel Auctioneers <">[email protected]> Mime-Version: 1.0 Subject: Unreserved Online Auction - 1973 David Brown 990 Tractor Message-Id: <1ZEgh9GoQx6aQzapTysgtQ@geopod-ismtpd-18> Reply-To: [email protected] X-Sg-Eid: u001.26wSUPoMrws/h4O5viY/eLNPw9MFGIe3Xzg5Jot2eNH/6jYgJxHWIeR4It91KHvZivaY6vSW6LCKmgmrJ7cmvpV7aevnVzjGQa/KqfMe7YyWtaRhzoDU6ZhfkF71r6Y+zOnnaSrivrYMBkzYrS2Cwr3O1bNg5Y+WBeorB2UB+dzeEGpxQI9mzqDoA5Z42EDMg9v+hb2CEWyZNbEPq6ojap+UyWuvFgXz5ctFk9xGVq1QHzO+4OOMuN1+PHuKKmeuikhvsuDeCQAgumV3IZ7iZg== X-Sg-Id: u001.3RPxwXHvfbZY57uFbcgx0w6SYhq1oJRjbNXkEiaPWsj/Ig5jy5ABsybYYfZ0H/zt6/n9EY5zS1S9iPO28ZvRb8OZGd+k0rGT7XBFh/EK5/jY+bzLXAcpNtILrBO3uxYwxVWiIpajFI6sH7Hw16orOPxauXAIA/ICKf1vWc0iXVLH5/Fq2yrQmOuZ6D/TigWmLhKf0mS7wFLPRKIA8XlG64teKg6JJGJjzQ50qSIs6QnEye40IwKc/BXlQksKRuu7 To: [email protected] X-Entity-Id: u001.sydFntM1jyij8gpR6AkhQw== List-Unsubscribe: <mailto:[email protected]?subject=9881061.nqi-fiCJSPXXIiS7M9cnagN2sZihGasYWY1PKqqDVtxoMDAwdTAwMK6GmADFY8mc9pLhz-Ftbkz3WFySzNjq_T6KN5NT4ch8b-wm2wb4n4uhQitYCvT6I3bQaQcrWo9JcFsqn772KgyQZYtIiDIBRaoBVqK7DpIpMipRwLRbfDR_mpF4ZYeCnA==.L2rBdMgOSHB_gpciKClNFoTwWFj0lK6OqYrVoBCSADdoMDAwdTAwMBuyFnyr2USBQq646uwbbbK7i6_AtweVa4q2c_N5QNkV2i4t-jj3RSeWSD8gB-VjcRSdqtMAuxQwdEC_CE41l3TjdeHNrDFDYFaBHsNjLaL7NjaTh8aAqdVPy1MRshb6UPDPue7nVMERTdKakEzLlgGly01QyRz3Aeu06R11piomQ_3fSZAssCODayc12-V6iO08HrOJ1vISEFx-0rB3uPOlOoamUtfpRtd5kHGeq_Ji-u_tdKDPILJS9Ky6q_HFlxmyGi2rsyy4lDPPFdWRW28hBxAp27s-P3g0ZpLT8xPc5MpoVc7R8Xxm75354UL3weqfq6rZukM4Pq_9QHFJfycG2_5DxnHxUPzXD9EJpQWDoIvL53fS9OIoF0eeq1JQ_pUfGcJyf3qoIyz6ZQu7pHE=>,<https://u9881061.ct.sendgrid.net/lu/unsubscribe?oc=u001.FJc8raRyLnhaK7tO2cTHft3oyjcDXgDSXXglkOuC39l7C-W2kLhh1FsQy4Y4kUXjaOjslCdrQCc6iNEAyKwjhcXvNfrMOjukkd9_T3wlWOxea4jHrPXFa9ULch6uXW_Gmzk0knUO9lhyUy83U5_mOENqXzaUkv93mF5a0cAFPE3VaTJL-XNOkXhuIB-KmS2j6l2w9gMkY8AzkNZ9OUJZuRavP-LDaa5n5FWqdPMwJXXkZOCxTb5iQZ8Gpg_7nqkax_j2NA50FMfTIurjiu0Jdrc7gflqdhZPSLa4Ns4LpGMaERquO3VlEC44NyfXyMFSs5kK_EMPFMnE6hsLj6AbWQ3aqILQWwANp5767T0WY9Lb_SXgAbpsuuJy-HhFCVRcDKu-xQucYTbv-u1-5qLyktR5P0_VRLQTBj0-p5vYUUxdxym0OixxfhHddc1JZQ7gZNc562w_rj93Eg1g2gfNoEp9mlzhq4Gwz2aQKHmMT3tqwyJCAoDn68T7lghqk6_OitWizZTdAyUJdo_Cg6tbW2U1V6KRVmcoQTmRU7FtOyAFX1rAf5J8C_sB-nvAYTCvVTIXC6mULX2tZliRhKheCNXtLp9jubwTGxFL6MUG4qduRCi5sY9GGAJOTqVGYv0tOKKbaNfLdeJwtIQP_lxUtiTtGxlqcsG_ViTczM5CFjcpAofcoqIqC8Q_EJnw0vS7RHYHkTENrqTzHdo0vkPQoR8u7OUxwCqf68ieHj6F2-F3IQTiqaMmCmX5V8y5mPFLleetwL1aLytT2X4iIvE_cvjD43slHE8cqS8ltW3mwAiZHGrvGtPXKhU8a2tVOjuptCqqmsgoF4BD4o-Sf4lpcoqPF9Cqn_I_PqZIm09jaAJrCEVGzfmvcYgztyOUbtSvyakYdVIXcvvZJcSkwXyTZzaIm5P1U4XjaK_RJs1Pkh8rb438-5VF13Yn2R5MRTe9> List-Unsubscribe-Post: List-Unsubscribe=One-Click X-Spamd-Bar: +++++++++++++ X-Spam-Status: Yes, score=13.15 X-Spam-Level: ************* X-Spam: Yes X-Evolution-Source: 0d25a7ed6d769a2e5a794beae6cff8212e4a42dd 5th section down "Authentication-Results" states dkim=fail, but running their DKIM through https://dmarcian.com/dkim-inspector/, https://easydmarc.com/tools/dkim-lookup?domain=gavelauctioneers.com and https://mxtoolbox.com/SuperTool.aspx?action=dkim:s1:gavelauctioneers.com&run=toolpage All tests show their DKIM is valid, but my system thinks it is spam. Their record has 8 tags, my domain has 3 tags.. Im not sure why this is classed as spam, there are other my customer examples, so i need to understand and fix it. dave
Maybe the email was forwarded from another source and this broke DKIM signature. If you use Rspamd, then you can use Rspamd GUI to have a closer look at why the score got assigned. If the score is not assigned due to bayes filtering, then ham learning has likely no effect as it was not scored as spam due to a learning filter.
