RSPAMD

Discussion in 'Installation/Configuration' started by chief, Oct 13, 2023.

  1. chief

    chief Member HowtoForge Supporter

    debian 12
    ispconfig 3.2.11
    multiserver config

    So, RSPAMD does its thinkg, i have whitelisted some domains... but i still keep getting valid none spam emails going to junk.
    i manually go and select then right click them and mark as not junk.
    still they go in to junk
    I have gone through the process of scan/learn and pasting the headers for spam and ham.
    makes not difference..
    i found this link, will it work as it states auto training on when user markes spam and moves back out?
    https://www.allerstorfer.at/rspamd-dovecot-ispconfig-automatic-spam-ham-training/
    dave
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Yes, that will work. But can you share the headers of a HAM mail that went into SPAM?
     
  3. chief

    chief Member HowtoForge Supporter

    Code:
    Return-Path:
     <bounce-mc.us13_177788945.6677301-7fce2fb0dc@mail121.suw91.mcdlv.net>
    Delivered-To: [email protected]
    Received: from mx1.tlwebservices.co.uk by mx1.tlwebservices.co.uk with LMTP
     id sDsfEw0hMGUrGwQAyW+1Gw (envelope-from
     <bounce-mc.us13_177788945.6677301-7fce2fb0dc@mail121.suw91.mcdlv.net>) for
     <[email protected]>; Wed, 18 Oct 2023 19:16:45 +0100
    Received: from mail121.suw91.mcdlv.net (mail121.suw91.mcdlv.net
     [198.2.184.121]) by mx1.tlwebservices.co.uk (Postfix) with ESMTPS id
     8759E58FA98 for <[email protected]>; Wed, 18 Oct 2023 19:16:44 +0100
     (BST)
    Authentication-Results: mx1.tlwebservices.co.uk; dkim=pass
     header.d=vanzone.co.uk header.s=k2 header.b=FZbD7ROF; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     bounce-mc.us13_177788945.6677301-7fce2fb0dc@mail121.suw91.mcdlv.net
     designates 198.2.184.121 as permitted sender)
     smtp.mailfrom=bounce-mc.us13_177788945.6677301-7fce2fb0dc@mail121.suw91.mcdlv.net;
     dmarc=none
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
     d=tlsystems.co.uk; s=default; t=1697653004;
     h=from:from:reply-to:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:list-id:list-unsubscribe:
     list-unsubscribe-post:dkim-signature;
     bh=/XJWsAR/YeiRLE3s0kW5W43L/50isbwURkG66RgMJIk=;
     b=BtBoOiLsv3K8oYEVWDwhVFQC3de6XPTdKVVNzUGnH/doIhaGkVXQJQgF3q9gFirQ3a628Q
     BoWHKiUix5JPW5ENfpi5ea4X76Zb3RS/7hfr3Vzw4WrVa7hzRVBr9IhaCn6e13sSnNifhq
     YTTVIekZ8CKzY8CF7niGua24UrfO3h4CXCKKxhlgUB0BVfN39re5FANZW6pzmRMhQoPbuo
     CFNnnUiz4k0CoT2O692ZtBQ8077M6YeKh295GgrywZw4B0v6IK+BgqSoiswdEQRk2r6OBQ
     sxwX1S7ZZbQfk6qMXTyio0gfUxLTNH7KRs5Ofn3C2yYBcM46r8lWaDiWupG1cw==
    ARC-Authentication-Results: i=1; mx1.tlwebservices.co.uk; dkim=pass
     header.d=vanzone.co.uk header.s=k2 header.b=FZbD7ROF; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     bounce-mc.us13_177788945.6677301-7fce2fb0dc@mail121.suw91.mcdlv.net
     designates 198.2.184.121 as permitted sender)
     smtp.mailfrom=bounce-mc.us13_177788945.6677301-7fce2fb0dc@mail121.suw91.mcdlv.net;
     dmarc=none
    ARC-Seal: i=1; s=default; d=tlsystems.co.uk; t=1697653004; a=rsa-sha256;
            cv=none;
            b=bEZwT7JRFqyYXGCBf6rycEK35NUo/ywtpOvqrnQrJ45zJtOHe7PDgGdHGqBUdOq+7l+6BK
            af3jJoP2y5zxw0d/MES6reGkL8ejhIdo25D+QENbDwn0UPyGkAZEdJYcaw7gnrWzdDdf7P
            X8xdcgvJEc6nhMb2+4zVVvIOpVltvbYiEPjQ383zgsFjX36OLeRONOc+hescKkKvOhhiRK
            9zFrvUOZh0Aj/oXWInDMb7gHBdZEXEcz7+3A1jWqHmjP4bj77zQOaIK8vcjpIqQ3GgcsMF
            bEpKOHNAHrf4p/341rWOBiR9gB5lWB1z4sXL8G+z7Nv0WbAn+dPcNB3yIa5OKw==
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vanzone.co.uk;
     s=k2; t=1697652065; x=1697912565; [email protected];
     bh=/XJWsAR/YeiRLE3s0kW5W43L/50isbwURkG66RgMJIk=;
     h=Subject:From:Reply-To:To:Date:Message-ID:X-MC-User:Feedback-ID:
     List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:
     MIME-Version:CC:Date:Subject:From;
     b=FZbD7ROF02yHn6zTzp8x6r5+dTkS3cELx9wxfvgNwpgXdUWwdr4LMId7K0sPoChP1
     DyWc9FG4jSZzTzUcy3SF8erTaTOS7UNp0WU/q2Rkr4ZLD6rcx1OA407ILICuGQcFeN
     8klPuhtXJ1fn/pp9sHxONrmvvF7QlmOJNMvPNzZn1yns+gsC2t+T7mONRMGx8VLklx
     F3iLgTiNK2N07CP7nCTpEPIZYjGCcQP2eyhTetadbBX/UJm4jdRwlORkNSuq5VLwQn
     YChoQEvrlYsufy0Ik9IK4Ui1gI76I54/tqqRAMQsek19y01Yx8p+Xa11tm5wGxumui
     5hKgJSndvn8ew==
    Received: from localhost (localhost [127.0.0.1])
            by mail121.suw91.mcdlv.net (Mailchimp) with ESMTP id 4S9dv55tTyz7mYs5R
            for <[email protected]>; Wed, 18 Oct 2023 18:01:05 +0000 (GMT)
    Subject:
     =?utf-8?Q?Affordable=20New=20Van=20Prices=20Await=20You=20=E2=80=93=20No=20Tricks=2C=20Only=20Treats=21=20=F0=9F=98=B1=20=F0=9F=91=BB?=
    From: =?utf-8?Q?Vanzone=20UK?= <[email protected]>
    Reply-To: =?utf-8?Q?Vanzone=20UK?= <[email protected]>
    To: <[email protected]>
    Date: Wed, 18 Oct 2023 18:00:21 +0000
    Message-ID: <34039af2ee0f42218420a7da4.7fce2fb0dc.20231018180006.a46598ec15.3f0031a1@mail121.suw91.mcdlv.net>
    X-Mailer: Mailchimp Mailer - **CIDa46598ec157fce2fb0dc**
    X-Campaign: mailchimp34039af2ee0f42218420a7da4.a46598ec15
    X-campaignid: mailchimp34039af2ee0f42218420a7da4.a46598ec15
    X-Report-Abuse: Please report abuse for this campaign here:
     https://mailchimp.com/contact/abuse/?u=34039af2ee0f42218420a7da4&id=a46598ec15&e=7fce2fb0dc
    X-MC-User: 34039af2ee0f42218420a7da4
    Feedback-ID: 177788945:177788945.6677301:us13:mc
    List-ID: 34039af2ee0f42218420a7da4mc list
     <34039af2ee0f42218420a7da4.1130293.list-id.mcsv.net>
    X-Accounttype: pr
    List-Unsubscribe:
     <https://vanzone.us13.list-manage.com/unsubscribe?u=34039af2ee0f42218420a7da4&id=bf02ced89a&e=7fce2fb0dc&c=a46598ec15>,
     <mailto:unsubscribe-mc.us13_34039af2ee0f42218420a7da4.a46598ec15-7fce2fb0dc@unsubscribe.mailchimpapp.net?subject=unsubscribe>
    List-Unsubscribe-Post: List-Unsubscribe=One-Click
    Content-Type: multipart/alternative; boundary="_----------=_MCPart_1531435964"
    MIME-Version: 1.0
    X-Spamd-Bar: ++++++++
    X-Spam-Level: ********
    X-Spam-Status: Yes, score=8.88
    X-Spam: Yes
    X-Evolution-Source: 0d25a7ed6d769a2e5a794beae6cff8212e4a42dd
     
  4. chief

    chief Member HowtoForge Supporter

    Code:
    Return-Path:
     <bounce-mc.us15_73863570.261876-df9b3a7e29@mail236.atl241.mcsv.net>
    Delivered-To: [email protected]
    Received: from mx1.tlwebservices.co.uk by mx1.tlwebservices.co.uk with LMTP
     id KBB9BAT9L2Wu4AMAyW+1Gw (envelope-from
     <bounce-mc.us15_73863570.261876-df9b3a7e29@mail236.atl241.mcsv.net>) for
     <[email protected]>; Wed, 18 Oct 2023 16:43:00 +0100
    Received: from mail236.atl241.mcsv.net (mail236.atl241.mcsv.net
     [198.2.141.236]) by mx1.tlwebservices.co.uk (Postfix) with ESMTPS id
     77E6A58FA91 for <[email protected]>; Wed, 18 Oct 2023 16:42:58 +0100
     (BST)
    Authentication-Results: mx1.tlwebservices.co.uk; dkim=pass
     header.d=solatek.co.uk header.s=k1 header.b=o4rshzA8; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     bounce-mc.us15_73863570.261876-df9b3a7e29@mail236.atl241.mcsv.net
     designates 198.2.141.236 as permitted sender)
     smtp.mailfrom=bounce-mc.us15_73863570.261876-df9b3a7e29@mail236.atl241.mcsv.net;
     dmarc=pass (policy=none) header.from=solatek.co.uk
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
     d=tlsystems.co.uk; s=default; t=1697643778;
     h=from:from:reply-to:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:list-id:list-unsubscribe:
     list-unsubscribe-post:dkim-signature;
     bh=m2pOgh2El7BBi16+pA7fw0Zsye3BS+ijWFgxQlmPk7A=;
     b=VUvC9i5iVwtALN21CYmT0hrLBofPzzlU3LHpBgS4gwlLNlfVyAS0i4VAG3oy0GZda/rRvF
     XOlDhaLelJ/QQeR5VTIDy8C/pioq0VB6XLKn1UE4++cofMgKm6NCNClaJbP8iAn0ho6S1M
     61HTDH6CjVvfxznuKLy89o5xt+WF0phl5zMzXZpWHup9znxxoparx3JX+7p3PqRdoQIojZ
     chNtx4cd8AzJjAWeNH4OvPx8cInM+a099m0E269vZaX+NYLMZ5gRo+IlUF7iQjO2VYglKd
     ECau5oLdcRMuor/WYzdbN84ogaPt6YwFjRF3zRcuD4W4zOoqUI7sR8ymjNhcsw==
    ARC-Authentication-Results: i=1; mx1.tlwebservices.co.uk; dkim=pass
     header.d=solatek.co.uk header.s=k1 header.b=o4rshzA8; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     bounce-mc.us15_73863570.261876-df9b3a7e29@mail236.atl241.mcsv.net
     designates 198.2.141.236 as permitted sender)
     smtp.mailfrom=bounce-mc.us15_73863570.261876-df9b3a7e29@mail236.atl241.mcsv.net;
     dmarc=pass (policy=none) header.from=solatek.co.uk
    ARC-Seal: i=1; s=default; d=tlsystems.co.uk; t=1697643778; a=rsa-sha256;
            cv=none;
            b=j/jSsqRCc3OX1PCDahHNvUm3IafU6V9oNocHBX50X3wxVE1HlzNSfAIwQm1WfI43miCEl+
            TTTB2aNYl0igPihW/D1UsARcpHcjj3H99bDMFB++BwPf5zjTbMfP0hxzwZBMz8RD8cwGtc
            8poPy64y6rTiZm1q94lB2ft7jr6mk3N8h/u3hLEAn8zxAt6nK5vJOkJucTMkZvXz2ThEZU
            B8yLrkU0GBsMOCJudbAhfVTxCiSPb7tXeXRIlW862irA6aRZxrPXnhnRRNLofqygc0jj1u
            eG6/sA+wo7ZewpXHVaIGVb9apsAAHsYeum/jJtv4gVUXSRYERTj6YCuFb90+Hg==
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=solatek.co.uk;
     s=k1; t=1697642690; x=1697903190; [email protected];
     bh=m2pOgh2El7BBi16+pA7fw0Zsye3BS+ijWFgxQlmPk7A=;
     h=Subject:From:Reply-To:To:Date:Message-ID:X-MC-User:Feedback-ID:
     List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:
     MIME-Version:CC:Date:Subject:From;
     b=o4rshzA89lmaQcJ4KTF329dPbPlBL7NxOUpzFUH9V2sbiQIUf4sIRqyaFu6qW1wI5
     7hIR6uHij6FuqDZl001uciI2nNUqyIar8r+NnSDyk1kCel0pEwxjDZJGlER8oIkb01
     W5SeyGFs039u5IB54NxBLA9u2OhK9ERegSOs3Fb0=
    Received: from localhost (localhost [127.0.0.1])
            by mail236.atl241.mcsv.net (Mailchimp) with ESMTP id 4S9ZQp1JKCz6CdWFY
            for <[email protected]>; Wed, 18 Oct 2023 15:24:50 +0000 (GMT)
    Subject: =?utf-8?Q?Mac=20Deals?=
    From: =?utf-8?Q?Elliott=20Beacham=20|=20Solatek=20Ltd?= <[email protected]>
    Reply-To: =?utf-8?Q?Elliott=20Beacham=20|=20Solatek=20Ltd?= <[email protected]>
    To: <[email protected]>
    Date: Wed, 18 Oct 2023 15:24:40 +0000
    Message-ID: <4ed0d93ae4167088b297811a3.df9b3a7e29.20231018152431.9143fd43fa.5d88951c@mail236.atl241.mcsv.net>
    X-Mailer: Mailchimp Mailer - **CID9143fd43fadf9b3a7e29**
    X-Campaign: mailchimp4ed0d93ae4167088b297811a3.9143fd43fa
    X-campaignid: mailchimp4ed0d93ae4167088b297811a3.9143fd43fa
    X-Report-Abuse: Please report abuse for this campaign here:
     https://mailchimp.com/contact/abuse/?u=4ed0d93ae4167088b297811a3&id=9143fd43fa&e=df9b3a7e29
    X-MC-User: 4ed0d93ae4167088b297811a3
    Feedback-ID: 73863570:73863570.261876:us15:mc
    List-ID: 4ed0d93ae4167088b297811a3mc list
     <4ed0d93ae4167088b297811a3.145499.list-id.mcsv.net>
    X-Accounttype: pd
    List-Unsubscribe:
     <https://solatek.us15.list-manage.com/unsubscribe?u=4ed0d93ae4167088b297811a3&id=d0a39025fa&e=df9b3a7e29&c=9143fd43fa>,
     <mailto:unsubscribe-mc.us15_4ed0d93ae4167088b297811a3.9143fd43fa-df9b3a7e29@unsubscribe.mailchimpapp.net?subject=unsubscribe>
    List-Unsubscribe-Post: List-Unsubscribe=One-Click
    Content-Type: multipart/alternative; boundary="_----------=_MCPart_1700429264"
    MIME-Version: 1.0
    X-Spam-Status: Yes, score=6.69
    X-Spamd-Bar: ++++++
    X-Spam-Level: ******
    X-Spam: Yes
    X-Evolution-Source: 0d25a7ed6d769a2e5a794beae6cff8212e4a42dd
     
  5. chief

    chief Member HowtoForge Supporter

    Code:
    Return-Path: <[email protected]>
    Delivered-To: [email protected]
    Received: from mx1.tlwebservices.co.uk by mx1.tlwebservices.co.uk with LMTP
     id MNGdBl9oLmVJOgAAyW+1Gw (envelope-from
     <[email protected]>) for
     <[email protected]>; Tue, 17 Oct 2023 11:56:31 +0100
    Received: from mail68.suw91.mcdlv.net (mail68.suw91.mcdlv.net
     [198.2.184.68]) by mx1.tlwebservices.co.uk (Postfix) with ESMTP id
     7D65A58F880 for <[email protected]>; Tue, 17 Oct 2023 11:56:30 +0100
     (BST)
    Authentication-Results: mx1.tlwebservices.co.uk; dkim=pass
     header.d=mailchimpapp.net header.s=k2 header.b=oXGNZjIK; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     [email protected] designates
     198.2.184.68 as permitted sender)
     smtp.mailfrom=bounce-mc.us1_119005.182402-c55d951d8d@mail68.suw91.mcdlv.net;
     dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)"
     header.from=spire.co.uk (policy=none)
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
     d=tlsystems.co.uk; s=default; t=1697540190;
     h=from:from:reply-to:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:list-id:list-unsubscribe:
     list-unsubscribe-post:dkim-signature;
     bh=WKC4YMFPPgb+Kk6mIjE4oOMYG1+CzF6ufI0OGXnvacM=;
     b=jFZxAI6tVoUT1ADgQtFY1Af25NSpZURE/L0Qax5kyOfz+gMjbYTl0xkNxUut2mAIt7h0xM
     427JTcAt1GjY7oXTIuHfmijprnRIJ9VP1VdvQqBDQwxn2bJ4N/4EPkjWyjVHAUo4SW/79I
     1ZHXZiy25dxp9vkrDQS5dUBQX+e9eJs96yxb0aYOeWMKrsOMwkyzJ+o59rawmvdTChmJYj
     a/OvASaXjys8xVusBUMOBaS5cVYXCqagzKzzzxCPEBYluoszAyMVpkBAt4TKjXuq5WWzBs
     p3Oaxuq1aFB0bCyJb8Jn4k2/zu0xBIivDsv2iPiOuOgNBFp6vbl4Hm8MZCBMnQ==
    ARC-Authentication-Results: i=1; mx1.tlwebservices.co.uk; dkim=pass
     header.d=mailchimpapp.net header.s=k2 header.b=oXGNZjIK; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     [email protected] designates
     198.2.184.68 as permitted sender)
     smtp.mailfrom=bounce-mc.us1_119005.182402-c55d951d8d@mail68.suw91.mcdlv.net;
     dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)"
     header.from=spire.co.uk (policy=none)
    ARC-Seal: i=1; s=default; d=tlsystems.co.uk; t=1697540190; a=rsa-sha256;
            cv=none;
            b=T/HA9Q5WW8gRswECIbmWPV0eI7DjbIyVNDfIFp5/gutLEWdLyTQDrYvDCK0+XOlGzd7s1t
            SOWa/37Ney8jVIQanAahCZQIsPlXG1vsc6YO+crEU/NILKE2fqcjP6+AjG/hrPZmOVjB95
            x/pmhNVvGWRW/mqzaI4i5ljL82OCA/YZ+og0Hj23HSSD56x7Pt0DB5GGwAwtGX1xbCjW6C
            yItENvM78+M4fTcb1rEn+zqIvTaVTtfXcCsrMQopSnOtxg7LakLWYitvsZBRdzs6yQNaUc
            NzbPDBcAe2Ynx1sX3PFFONizsUR6tSmDjXOU6aiKMLPxLj7trDrx4R1NuCwCmg==
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchimpapp.net;
            s=k2; t=1697539055; x=1697799555;
            [email protected];
            bh=WKC4YMFPPgb+Kk6mIjE4oOMYG1+CzF6ufI0OGXnvacM=;
            h=Subject:From:Reply-To:To:Date:Message-ID:X-MC-User:Feedback-ID:
             List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:
             MIME-Version:CC:Date:Subject:From;
            b=oXGNZjIK4dZnG/JEXvbxx5EUXb1E8tzREUVeoW8wfgrp0N+ObonP48MNkVhg7Ouct
             +30VZKyB8Ly1bCxvZgD1Lliy79YAtXFejas7/mrURnSf+EgMjooM1/tidG42+QJG1Y
             HJj29EKda6CO7LctBzgjW26ByepFa7O24joOyOXYYFM0wVvK//6QNs1NTtrZpf8bLK
             B2V6VjGHmUVj2GPMT4qNaTFwYLic+TrM8gAnZB57oObDpT+1724c2Q3c9S7syDcDSb
             +2hNd7JP6w/Xi9ngn6gpQ7JU/oniDbt7UK159fw8K/MOxR0e+gu0nKRUor++sUZQmG
             /TQHRx9tz8Khw==
    Received: from localhost (localhost [127.0.0.1])
            by mail68.suw91.mcdlv.net (Mailchimp) with ESMTP id 4S8r5q5K37z3tB3WC
            for <[email protected]>; Tue, 17 Oct 2023 10:37:35 +0000 (GMT)
    Subject:
     =?utf-8?Q?Discover=3A=20The=20ultimate=20upgrade=20for=201440p=20gaming.?=
    From: =?utf-8?Q?Spire=20Technology?= <[email protected]>
    Reply-To: =?utf-8?Q?Spire=20Technology?= <[email protected]>
    To: <[email protected]>
    Date: Tue, 17 Oct 2023 10:37:34 +0000
    Message-ID: <0fe5a07f23a6dfe992b99cd43.c55d951d8d.20231017103728.440397f891.0d7820c5@mail68.suw91.mcdlv.net>
    X-Mailer: Mailchimp Mailer - **CID440397f891c55d951d8d**
    X-Campaign: mailchimp0fe5a07f23a6dfe992b99cd43.440397f891
    X-campaignid: mailchimp0fe5a07f23a6dfe992b99cd43.440397f891
    X-Report-Abuse: Please report abuse for this campaign here:
     https://mailchimp.com/contact/abuse/?u=0fe5a07f23a6dfe992b99cd43&id=440397f891&e=c55d951d8d
    X-MC-User: 0fe5a07f23a6dfe992b99cd43
    Feedback-ID: 119005:119005.182402:us1:mc
    List-ID: 0fe5a07f23a6dfe992b99cd43mc list
     <0fe5a07f23a6dfe992b99cd43.81717.list-id.mcsv.net>
    X-Accounttype: pd
    List-Unsubscribe:
     <https://spire.us1.list-manage.com/unsubscribe?u=0fe5a07f23a6dfe992b99cd43&id=2c659bdcaf&e=c55d951d8d&c=440397f891>,
     <mailto:unsubscribe-mc.us1_0fe5a07f23a6dfe992b99cd43.440397f891-c55d951d8d@unsubscribe.mailchimpapp.net?subject=unsubscribe>
    List-Unsubscribe-Post: List-Unsubscribe=One-Click
    Content-Type: multipart/alternative; boundary="_----------=_MCPart_474445484"
    MIME-Version: 1.0
    X-Spam-Status: Yes, score=9.13
    X-Spamd-Bar: +++++++++
    X-Spam-Level: *********
    X-Spam: Yes
    X-Evolution-Source: 0d25a7ed6d769a2e5a794beae6cff8212e4a42dd
     
  6. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Are these the full headers? I am missing X-Spamd-Result from them.
     
  7. chief

    chief Member HowtoForge Supporter

    this is the full message
    Code:
    Return-Path:
     <bounce-mc.us15_73863570.261896-df9b3a7e29@mail234.atl21.rsgsv.net>
    Delivered-To: [email protected]
    Received: from mx1.tlwebservices.co.uk by mx1.tlwebservices.co.uk with LMTP
     id 0IG8AOVDMWXAxgcAyW+1Gw (envelope-from
     <bounce-mc.us15_73863570.261896-df9b3a7e29@mail234.atl21.rsgsv.net>) for
     <[email protected]>; Thu, 19 Oct 2023 15:57:41 +0100
    Received: from mail234.atl21.rsgsv.net (mail234.atl21.rsgsv.net
     [205.201.133.234]) by mx1.tlwebservices.co.uk (Postfix) with ESMTPS id
     387CC58FAE9 for <[email protected]>; Thu, 19 Oct 2023 15:57:40 +0100
     (BST)
    Authentication-Results: mx1.tlwebservices.co.uk; dkim=pass
     header.d=solatek.co.uk header.s=k1 header.b=OloqiHdX; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     bounce-mc.us15_73863570.261896-df9b3a7e29@mail234.atl21.rsgsv.net
     designates 205.201.133.234 as permitted sender)
     smtp.mailfrom=bounce-mc.us15_73863570.261896-df9b3a7e29@mail234.atl21.rsgsv.net;
     dmarc=pass (policy=none) header.from=solatek.co.uk
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
     d=tlsystems.co.uk; s=default; t=1697727460;
     h=from:from:reply-to:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:list-id:list-unsubscribe:
     list-unsubscribe-post:dkim-signature;
     bh=gKhPOKMIF2dCUCF9iwtEIxBE0Xx44upmzE3djJn7nTg=;
     b=TDZHu8eQdCLDFpVRHwoeF9Xw7Lx5zz1jASjgQgyNvRlr3vA/wMjWfdzHi2z9W/wz6v9E1T
     KJsxFIWE+Ths8mfIPVBh6aoume657gFlmf9YEhWn0xyYKRQVh82bqwgdWH9kTxygWBrfvq
     vbzBo0G9nmeIQ8gyJJiOcYnn4M4EZ/JfPi+gNh0AeQ2sjHee6Cpc+NHKF+xKfsT/sN0dGx
     ojIF7/AzeLUB20i6VWLMJ+bHyfQexpGagWqF3eyU7uylxXIFL+WCP/4nMPXOIW0B2epLmK
     tYveiZrIszp1Rlt10CauvDLvzKUU0Oje6I0Ul8Y0bS7Pi3klpp62um80+MWhvA==
    ARC-Authentication-Results: i=1; mx1.tlwebservices.co.uk; dkim=pass
     header.d=solatek.co.uk header.s=k1 header.b=OloqiHdX; spf=pass
     (mx1.tlwebservices.co.uk: domain of
     bounce-mc.us15_73863570.261896-df9b3a7e29@mail234.atl21.rsgsv.net
     designates 205.201.133.234 as permitted sender)
     smtp.mailfrom=bounce-mc.us15_73863570.261896-df9b3a7e29@mail234.atl21.rsgsv.net;
     dmarc=pass (policy=none) header.from=solatek.co.uk
    ARC-Seal: i=1; s=default; d=tlsystems.co.uk; t=1697727460; a=rsa-sha256;
            cv=none;
            b=bwOf65mvqiJ70OsmWbq3Zo1tBy4psX999f5g6PB/sfspL/G+qnd9nxnf1CtRRRzasLtybm
            FUNXeeHx5fkfKAT4TaDABeqgXkFBuPNrGR19yShN4wgbx9SrzkNwA+mWurFs3mCPElZs4N
            PooDevNmfezGrGs81A/zwgG8yvmNGjcvMvElav73RCrB7yXFjgP5V21bN/h9HyFrufrcT9
            OkEZTSM+vyiAoneyYG9YkhqX3/g02HmmIVn2lJhwGU6V8t0agv7QTakiKLUcuo5+EZjyT8
            gYka8akq5wy9G3o6HQZ38wwSMwcpE72Gt5HV8RErAG9Lo2eibnywPfLNM3ling==
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=solatek.co.uk;
     s=k1; t=1697726505; x=1697987005; [email protected];
     bh=gKhPOKMIF2dCUCF9iwtEIxBE0Xx44upmzE3djJn7nTg=;
     h=Subject:From:Reply-To:To:Date:Message-ID:X-MC-User:Feedback-ID:
     List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:
     MIME-Version:CC:Date:Subject:From;
     b=OloqiHdX4K2GHZgER+YOAUU/zH117mObI8uP6He5eiL+1c6gexm0K0H0Svxo8OiUg
     A2IOyj3EKC2jQiPkiBlc9nmZyET5GnzBGmn3BzcpZIhTTb+sGPAFwMD/pB9Hn572bD
     GTmY0KixbQKU/R2onJ6dRG4rl7lfIkczzk+JUQM8=
    Received: from localhost (localhost [127.0.0.1])
            by mail234.atl21.rsgsv.net (Mailchimp) with ESMTP id 4SB9Qd10G2zCfVt73
            for <[email protected]>; Thu, 19 Oct 2023 14:41:45 +0000 (GMT)
    Subject: =?utf-8?Q?UK=20VAT=20Margin=20iPhones?=
    From: =?utf-8?Q?Elliott=20Beacham=20|=20Solatek=20Ltd?= <[email protected]>
    Reply-To: =?utf-8?Q?Elliott=20Beacham=20|=20Solatek=20Ltd?= <[email protected]>
    To: <[email protected]>
    Date: Thu, 19 Oct 2023 14:41:43 +0000
    Message-ID: <4ed0d93ae4167088b297811a3.df9b3a7e29.20231019144127.22785fc757.de04f38c@mail234.atl21.rsgsv.net>
    X-Mailer: Mailchimp Mailer - **CID22785fc757df9b3a7e29**
    X-Campaign: mailchimp4ed0d93ae4167088b297811a3.22785fc757
    X-campaignid: mailchimp4ed0d93ae4167088b297811a3.22785fc757
    X-Report-Abuse: Please report abuse for this campaign here:
     https://mailchimp.com/contact/abuse/?u=4ed0d93ae4167088b297811a3&id=22785fc757&e=df9b3a7e29
    X-MC-User: 4ed0d93ae4167088b297811a3
    Feedback-ID: 73863570:73863570.261896:us15:mc
    List-ID: 4ed0d93ae4167088b297811a3mc list
     <4ed0d93ae4167088b297811a3.145499.list-id.mcsv.net>
    X-Accounttype: pd
    List-Unsubscribe:
     <https://solatek.us15.list-manage.com/unsubscribe?u=4ed0d93ae4167088b297811a3&id=d0a39025fa&e=df9b3a7e29&c=22785fc757>,
     <mailto:unsubscribe-mc.us15_4ed0d93ae4167088b297811a3.22785fc757-df9b3a7e29@unsubscribe.mailchimpapp.net?subject=unsubscribe>
    List-Unsubscribe-Post: List-Unsubscribe=One-Click
    Content-Type: multipart/alternative; boundary="_----------=_MCPart_1591220110"
    MIME-Version: 1.0
    X-Spam-Status: Yes, score=8.28
    X-Spamd-Bar: ++++++++
    X-Spam-Level: ********
    X-Spam: Yes
    X-Evolution-Source: 0d25a7ed6d769a2e5a794beae6cff8212e4a42dd
    
    This is a multi-part message in MIME format
    
    --_----------=_MCPart_1591220110
    Content-Type: text/plain; charset="utf-8"; format="fixed"
    Content-Transfer-Encoding: quoted-printable
    ....
    
    
    message was too long
     
  8. chief

    chief Member HowtoForge Supporter

  9. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Can you share your Postfix config?
     
  10. chief

    chief Member HowtoForge Supporter

  11. chief

    chief Member HowtoForge Supporter

    in RSPAMD i only have mx1 displayed. should both mail servers be displayed?
    mx1 - primary
    mx2 - secondary
     
  12. chief

    chief Member HowtoForge Supporter

    Hey Th0m, postfix config posted above.
    I am still trouble shooting my setup, some mailboxes wont replicate to mx2, RSPAMD states
    Code:
    mx2 > Cannot get server status
    I see conflicting writing in the how to..
    specifically this section on pages 3 and 4
    Code:
    Now we are going to add a website for this server in ISPConfig. Go to Sites -> Add new website and add the website "mx1.example.com". Make sure you create this on the correct server (mx1.example.com). Disable auto-subdomain, and enable SSL + Let's Encrypt. Then, go to options, and paste this in the Apache directives section:
    
    RewriteEngine On
    RewriteRule ^/rspamd$ /rspamd/ [R,L]
    RewriteRule ^/rspamd/(.*) http://127.0.0.1:11334/$1 [P]
    Header set Access-Control-Allow-Origin https://mx2.example.com
    Replace mx2.example.com with the hostname of the secondary nameserver.
    last section states replacing the mx.example (second mail server and replacing the name of the secondary nameserver, so it would be ns2.example.com.
    can you confirm this is indeed correct and not the second mail server?
    Also, when going back over my setup i notice under domains - server mx2.example has a website called mx2.example, but when i edit the site, it states server as mx1.example. i know it is a mirror of mx1.example, from system -> mx2.example (mirror of mx1.example) - It would read better having a flag like
    Code:
    Server: mx2.example (mirroring mx1.example)
     
    Last edited: Oct 26, 2023
  13. chief

    chief Member HowtoForge Supporter

    Also just tried accessing mx2.example/rspamd
    i can log in and it shows mx1 and mx2 in the list, when logging into mx1.example/rspamd it only shows mx1 states mx2 cannot connect as above.
    they are acting like seperate servers now and not mx1.example as master
     
  14. chief

    chief Member HowtoForge Supporter

    system -> server config -> mx1 and mx2 -> mail -> what should then both say for "Rspamd URL"
    mine state
    Code:
    mx1 = https://mx1.example:8081/rspamd/
    mx2 = https://mx2.example:8081/rspamd/
     
  15. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    If you want to see both servers in the rspamd UI, you need to configure them as neighbours, which is described in the multiserver guide: https://www.howtoforge.com/tutorial...ntu/3/#-setting-up-synchronisation-for-rspamd and https://www.howtoforge.com/tutorial...ntu/4/#-setting-up-synchronisation-for-rspamd

    This needs to be set up before setting up mirroring, doing it after will be more complicated (but not impossible) because sites will be mirrored as well. But that the rspamd neighbouring config is not OK is not the cause of your problem.

    Your Postfix config looks mostly OK. Can you share screenshots of the email account's email filter settings?
     
  16. chief

    chief Member HowtoForge Supporter

    Thank Th0m,
    i dont remember it being like this before upgrading debian 11 to 12 and then upgrading ispconfig to latest, then experiencing ssl cert failure. i deleted the domain mx.domain and then re added it (ID changed) and then realised port 80 was blocked.
    I wanted it to be just mx1 to display all servers and run from 1 console.
     
  17. chief

    chief Member HowtoForge Supporter

    Th0m, thanks for the assist last year with the support!! awsome!!
    im still having users with false reports of **SPAM**.
    Code:
    https://www.allerstorfer.at/rspamd-dovecot-ispconfig-automatic-spam-ham-training/
    first code line states to add the following
    Code:
    protocol imap {
      mail_plugins = imap_sieve
    }
    my original "
    /usr/local/ispconfig/server/conf-custom/install/dovecot_custom.conf.master" show
    Code:
    protocol imap {
    mail_plugins = $mail_plugins quota imap_quota notify replication
    }
    so, do i just append the line adding imap_sieve to the end of the line?
    Code:
    mail_plugins = $mail_plugins quota imap_quota notify replication imap_sieve
     
  18. till

    till Super Moderator Staff Member ISPConfig Developer

    I don't think that you have to add as Sieve is enabled by default as it's used by ISPConfig mail filters.
     
  19. chief

    chief Member HowtoForge Supporter

    thanks till for fast reply..
    the plugin on next line from howto
    Code:
    plugin {
      sieve_plugins = sieve_imapsieve sieve_extprograms
    
      # From elsewhere to Spam folder
      imapsieve_mailbox1_name = Junk
      imapsieve_mailbox1_causes = COPY
      imapsieve_mailbox1_before = file:/etc/dovecot/rspamd/rspamd-learn-spam.sieve
    
      # From Spam folder to elsewhere
      imapsieve_mailbox2_name = *
      imapsieve_mailbox2_from = Junk
      imapsieve_mailbox2_causes = COPY
      imapsieve_mailbox2_before = file:/etc/dovecot/rspamd/rspamd-learn-ham.sieve
    
      sieve_pipe_bin_dir = /etc/dovecot/rspamd
    
      sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment
    }
    append or add another plugin line?
    as mine just states
    Code:
    plugin {
    mail_replica = tcps:nameofothermailserver
    }
    
    QUESTION:--- mainly, the listed howto above https://www.allerstorfer.at/rspamd-dovecot-ispconfig-automatic-spam-ham-training/ is this a recommended model on how to get the user to train the spam and ham, currently things are ending in the spam which are not spam..
    dave
     
    Last edited: Mar 28, 2024
  20. chief

    chief Member HowtoForge Supporter

    Hey,
    It doesnt look like the following sieve was added by default
    Code:
    protocol imap {
      mail_plugins = imap_sieve
    }
    
    I ran through through the howto and then ran
    Code:
    dovecot -n
    and it did not show the sieve under protocol imap, i added as per instruction and it then showed up in dovecot -n.
    I created additional folder under
    Code:
    /etc/dovecot/rspamd
    and scripts for learning
    Code:
    -rwx------ 1 vmail vmail   60 Dec  6 20:48 rspamd-learn-ham.sh
    -rw------- 1 vmail vmail  314 Dec  6 19:59 rspamd-learn-ham.sieve
    -rw------- 1 vmail vmail  452 Dec  6 20:07 rspamd-learn-ham.svbin
    -rwx------ 1 vmail vmail   61 Dec  6 20:49 rspamd-learn-spam.sh
    -rw------- 1 vmail vmail  199 Dec  6 19:58 rspamd-learn-spam.sieve
    -rw------- 1 vmail vmail  354 Dec  6 20:05 rspamd-learn-spam.svbin
    and it all seems to work as per instruction, will now monitor it going forward and hopefully my users will get the benefit of training the spam system.
    have also adjusted Email->Policy->normal | Rspamd levels
    grey = 4.10
    SPAM tag level = 7.01
    SPAM tag method = from ***SPAM*** at the beginning to adds "X-SPAM: Yes"
    SPAM reject level = 15.01

    I will be monitoring the spam behaviour--
    Any other recommendations of fighting and training the spam fighting system in ispconfig

    ####EDIT

    are these anything to worry about?
    Code:
    2024-04-02 17:18:06 #1949738(controller) <6b2d5a>; csession; rspamd_controller_check_password: absent password has been specified; source ip: 127.0.0.1:55968
    2024-04-02 17:18:06 #1949738(controller) rspamd_controller_check_password: absent or incorrect password has been specified; source ip: 127.0.0.1:55968
     
    Last edited: Apr 2, 2024

Share This Page