Hello, on 22.04 with latest ISPconfig, I tried to configure pflogsumm to inform me about what happened in postfix logs "yesterday". To do this, I managed /etc/cron.dail/script with EMAIL = "[email protected]". Script executes : "/usr/sbin/pflogsumm -d yesterday /var/log/mail.log --problems-first --rej-add-from --verbose-msg-detail -q" I get an email from [email protected], like phpmyadmin "up-to-date" checks and others, but an email is classified as SPAM by Rspamd and delivered to Junk folder which is undesirable. Code: 2023-08-18 18:18:02 #638901(normal) <cd2f6d>; task; rspamd_task_write_log: id: <[email protected]>, qid: <010042197A>, ip: 127.0.0.1, from: <[email protected]>, (default: T (add header): [15.53/20.00] [ABUSE_SURBL(11.00){faxweb.ru:url;faxweb.ru:email;},BAYES_SPAM(4.63){98.80%;},MIME_GOOD(-0.10){text/plain;},ARC_NA(0.00){},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 23601, time: 469.506ms, dns req: 67, digest: <b98f9e3e4badb7741a f813c296ce786f>, rcpts: <[email protected]>, mime_rcpts: <[email protected]>, settings_id: ispc_mail_user_5 It look like, that Rspamd detects some strings in postfix log summary, which add SPAM score to email report (ABUSE_SURBL(11.00){faxweb.ru:url;faxweb.ru:email;},BAYES_SPAM(4.63){98.80%;}) Part of the report : Code: ..... message reject detail --------------------- RCPT 554 5.7.1 Service unavailable; Client host [185.228.233.120] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<s1.faxweb.ru> (total: 1) 1 185.228.233.120 ([email protected]) ..... Should I provide this report as ham for RSPAMd? Or there is better alternative to do this? Best Regards, Stanislav
