Have an HP printer setup to scan to me. it's using the same domain i use and both emails are hosted on my ispconfig server. Suddenly those emails are going to the spam folder and I can only assume rspamd is doing this. I know how to white list but is this normal behavior for rspamd?
It is rspamd that is doing this. You should check your rspamd logs and have a look what is causing rspamd to classify these mails as spam. You can find the logs at /var/log/rspamd/rspamd.log. Send a mail and then post the corrosponding log line here, so we can see what is causing this, and what is the best solution to fix it.
Code: 2026-04-30 09:58:21 #385647(normal) <17b5e9>; task; rspamd_task_write_log: id: <undef>, qid: <466908011E>, ip: x.x.x.x, user: [email protected], from: <[email protected]>, (default: T (add header): [6.80/10.00] [MISSING_MID(2.50){},FROM_EXCESS_QP(1.20){},TO_EXCESS_QP(1.20){},EMPTY_SUBJECT(1.00){},MISSING_DATE(1.00){},MIME_GOOD(-0.10){multipart/mixed;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:7922, ipnet:x.x.x.x/11, country:US;},DKIM_SIGNED(0.00){domain.com:s=default;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_ATTACHMENT(0.00){},LOCAL_OUTBOUND(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},MISSING_XM_UA(0.00){},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},R_DUMMY(0.00){},TO_DN_ALL(0.00){},TO_DOM_EQ_FROM_DOM(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 587759, time: 889.562ms, dns req: 14, digest: <f85cdcaa529a1d1a11774aa315713cc1>, rcpts: <[email protected]>, mime_rcpts: <[email protected]>, settings_id: ispc_spamfilter_user_5 2026-04-30 09:58:21 #385647(normal) <17b5e9>; task; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 3 regexps matched, 180 regexps total, 38 regexps cached, 0B scanned using pcre, 395B scanned total looks like the hp printer is not sending some header items that are expected.
Yea that's classic behavior for such systems sadly. It's missing a Message-ID and Date, the Subject is empty and some other stuff. 2 Options in this case: 1. Setup the device to use a SMTP Server to send the mails. 2. Setup a custom user setting and disable certain symbols to get the score below the "add header" threshold. For the 2nd option you would create a file in /etc/rspamd/locald.d/users/scanner_workaround.conf and set the following: Code: scanner_workaround { priority = 50; from = "[email protected]" apply { symbols_disabled = ["MISSING_MID", "MISSING_DATE", "EMPTY_SUBJECT"]; } } There is an issue with ISPConfig's implementation of user settings, for this to work you need the newest version 4.0.1 of rspamd installed on the system. For some details about the update checkout my last response here: https://forum.howtoforge.com/threads/rspamd-mind-of-its-own.95059/#post-470740
