Spam function seems to be abnormal

Good morning, everyone.

There are two domains on the server with the same spam policy “Normal”.
One of the domains seems to be performing normally, with more than a fraction of the emails, the automated email subject is tagged and moved to “Junk”.
However, the other domain does not seem to be performing correctly.

Also, in the RSPAMD interface I see that the “rewrite subject” value is empty, is this normal?

The above is attached.

Thank you.

 

I also checked “/etc/rspamd/local.d/users/”
The conf parameter for the domain name is the same as the ISPCONFIG setting.

Code:

ispc_spamfilter_user_14 {
    priority = 17;
    rcpt = "@(Domain names that seem to perform properly)";

    apply {
            CLAM_VIRUS = 1010;
        JUST_EICAR = 1010;
            actions {
                    "rewrite subject" =  6;
            "add header" = null;
                            reject = 10;
                        greylist = null;
                    }
    }

}

Code:

ispc_spamfilter_user_113 {
    priority = 20;
    rcpt = "@(Domains that seem to be abnormal)";

    apply {
            CLAM_VIRUS = 1010;
        JUST_EICAR = 1010;
            actions {
                    "rewrite subject" =  6;
            "add header" = null;
                            reject = 10;
                        greylist = null;
                    }
    }

}

 

Hello.

Thank you for your help.

"Filters can be set on mailbox and domain levels."
Does this mean I need to set up other filters once for each email ID?
If so, it is assumed to work, but may not be the way to find the cause of the current problem.

"Check that no other filter is set on mailbox level, as this overrides the domain-level filter."
I have confirmed all the mailbox IDs, the spam filtering policy is inherited from the domain name settings, no additional filtering settings, both domain IDs are the same settings.
But the feedback result, is it indicate that there is something abnormal?

 

Thank you.
I'll check out the issue you're talking about.


Also, I seem to have found a different setting for the IDs under the two domains.

The seemingly normal domain ID.
“Mail Filter” - ‘Move Spam to Junk Folder’ = ”Move After Custom Filters”

Abnormal-looking domain ID:
“Mail Filter” - ‘Move Spam to Junk’ = ‘Move before custom filters’ (this is the default setting when adding a new mailbox)

Maybe it has something to do with this?
I'll confirm this as well.

 

Okay, I'll check.
Thank you.