Hi, on my installation it looks like the "Spamfilter" setting is ignored on (at least) one Mailbox. I have one Mailbox with Spamfilter = "Wants all spam". In my Email > Spamfilter Policy I have the default settings for the policy "Wants all spam" in the Rspamd tab: Greylisting level: 999 SPAM tag level: 999 SPAM tag method: Subject (Adds "***SPAM***" at the beginning) SPAM reject level: 999 Two days ago that mailbox received an e-mail and that e-mail was marked as spam and sent to the Junk folder. Inside the e-mail body I can see: Code: X-Spamd-Result: default: False [12.14 / 15.00]; BAYES_SPAM(5.10)[99.99%]; REPLYTO_EQ_TO_ADDR(5.00)[]; SPOOF_DISPLAY_NAME(3.00)[bookingexpert.org,roma2b.it]; RCVD_UNAUTH_PBL(2.00)[]; ..........other rows removed......... X-Spamd-Bar: ++++++++++++ X-Spam-Level: ************ X-Rspamd-Action: add header X-Spam-Status: Yes, score=12.14 X-Rspamd-Server: m11 X-Rspamd-Queue-Id: 9C46D13E40670 X-Spam: Yes Also, the Subject of the received e-mail was not changed. This is what I find on /var/log/mail.log about this incoming e-mail: Code: 2024-06-02T13:59:25.303591+02:00 m11 postfix/smtpd[1935892]: connect from maildns01.nexteam.it[185.56.10.124] 2024-06-02T13:59:25.640200+02:00 m11 postfix/smtpd[1935892]: 9C46D13E40670: client=maildns01.nexteam.it[185.56.10.124] 2024-06-02T13:59:25.646732+02:00 m11 postfix/cleanup[1940545]: 9C46D13E40670: message-id=<[email protected]> 2024-06-02T13:59:26.218299+02:00 m11 postfix/qmgr[687378]: 9C46D13E40670: from=<[email protected]>, size=32194, nrcpt=1 (queue active) 2024-06-02T13:59:26.218568+02:00 m11 postfix/smtpd[1935892]: disconnect from maildns01.nexteam.it[185.56.10.124] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7 2024-06-02T13:59:26.223623+02:00 m11 dovecot: lmtp(1940556): Connect from local 2024-06-02T13:59:26.510743+02:00 m11 dovecot: lmtp([email protected])<1940556><sKZGDZ5eXGZMnB0A2IIbnw>: sieve: msgid=<[email protected]>: fileinto action: stored mail into mailbox 'Junk' 2024-06-02T13:59:26.511215+02:00 m11 dovecot: lmtp(1940556): Disconnect from local: Logged out (state=READY) 2024-06-02T13:59:26.511630+02:00 m11 postfix/lmtp[1940555]: 9C46D13E40670: to=<[email protected]>, relay=m11.itala.net[private/dovecot-lmtp], delay=1.2, delays=0.9/0.01/0/0.29, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> sKZGDZ5eXGZMnB0A2IIbnw Saved) 2024-06-02T13:59:26.511741+02:00 m11 postfix/qmgr[687378]: 9C46D13E40670: removed Any hint in order to investigate this? Thanks, Claudio
Which ISPConfig version do you use? Was the email received to a mailbox address, or to an alias of a mailbox?
Hi @till we are using ISPConfig 3.2.11 on a multi-server configuration. The server where this happens is not the master server. However, the slave server seems to have correct data. Here's an excerpt from the slave server, table spamfilter_users: The mailbox is the one listed there. The email was sent to a Mailbox address, not an alias.
Check the /var/log/rspamd/rspamd.log for the mail in question. Is the user configuration present at /etc/rspamd/local.d/users/?
