[Rspamd-Users] ***SPAM*** Re: Multimap Module Redis not map hashkey

Sophie Loewenthal sophie at klunky.co.uk
Mon Nov 5 13:36:32 UTC 2018


Off topic:

Rspamd just rewrote the message Subject from this list as possible Spam. This is new and I've not made any changes for months. Oops.

X-Rspamd-Queue-Id: 020673C
X-Spamd-Result: default: False [7.79 / 14.00];	 MSBL_EBL(7.50)[yolun56889401 at 163.com,ab0428297c74daa49cf134279e8c132215796647];	 HAS_REPLYTO(0.00)[users at lists.rspamd.com];	 MX_INVALID(0.50)[greylisted];	 FROM_HAS_DN(0.00)[];	 R_SPF_ALLOW(0.00)[+mx];	 R_DKIM_REJECT(1.00)[lists.rspamd.com];	 MIME_GOOD(-0.10)[text/plain];	 PREVIOUSLY_DELIVERED(0.00)[users at lists.rspamd.com];	 DMARC_NA(0.00)[live.com.ar];	 HAS_LIST_UNSUB(-0.01)[];	 ARC_REJECT(2.00)[signature check failed: fail, {[1] = sig:lists.rspamd.com:reject}];	 RCPT_COUNT_ONE(0.00)[1];	 BAD_REP_POLICIES(0.10)[];	 FREEMAIL_FROM(0.00)[live.com.ar];	 DKIM_TRACE(0.00)[lists.rspamd.com:-];	 BAYES_HAM(-3.00)[100.00%];	 TO_DN_ALL(0.00)[];	 MAILLIST(-0.20)[mailman];	 FORGED_SENDER(0.00)[emanuel_gonzalez at live.com.ar,users-bounces at lists.rspamd.com];	 FORGED_SENDER_MAILLIST(0.00)[];	 RCVD_TLS_LAST(0.00)[];	 ASN(0.00)[asn:24940, ipnet:88.99.0.0/16, country:DE];	 FROM_NEQ_ENVFROM(0.00)[emanuel_gonzalez at live.com.ar,users-bounces at lists.rspamd.com];	 RCVD_COUNT_SEVEN(0.00)[7]


Sent from phone, thus brief

On November 5, 2018 1:58:20 PM CET, Emanuel Gonzalez <emanuel_gonzalez at live.com.ar> wrote:
>Hello, me again ja.!
>
>i read this in the documentation:
>
>Given this setting is enabled, where-ever names of keys could be
>specified in configuration special values could be used, for example
>map = "redis://${ip}!foo in multimap configuration would dynamically
>set key name to something like 1.2.3.4!foo. Variable names which could
>be used are as follows:
>
>######################
>
>I try with redis://127.0.0.1!hashkey but not work.
>
>any ideas??
>
>Regards,
>________________________________
>De: Emanuel Gonzalez
>Enviado: viernes, 2 de noviembre de 2018 10:41
>Para: User questions
>Asunto: Multimap Module Redis not map hashkey
>
>Hello, I'm trying to map data through redis but I see that it does not
>work for me, will I be doing something wrong?
>
>I create an hashkey with the name "countryspam", here the sub-hashkey:
>
># /etc/rspamd/local.d] # redis-cli hgetall countryspam
> 1) "cs"
> 2) "CN"
> 3) "cs1"
> 4) "UA"
> 5) "cs2"
> 6) "RU"
> 7) "cs3"
> 8) "TR"
> 9) "cs4"
>10) "TW"
>11) "cs5"
>12) "VN"
>13) "cs6"
>14) "JP"
>15) "cs7"
>16) "IN"
>17) "cs8"
>18) "IR"
>19) "cs9"
>20) "BE"
>21) "cs10"
>22) "FR"
>23) "cs11"
>24) "CA"
>25) "cs12"
>26) "ID"
>27) "cs13"
>28) "AL"
>29) "cs14"
>30) "UZ"
>31) "cs15"
>32) "TN"
>33) "cs16"
>34) "NL"
>35) "cs17"
>36) "ZM"
>37) "cs18"
>38) "PK"
>39) "cs19"
>40) "PL"
>41) "cs20"
>42) "EG"
>43) "cs21"
>44) "MY"
>45) "cs22"
>46) "TH"
>47) "cs23"
>48) "DZ"
>
>In the multimap conf i set this config:
>
>COUNTRY_SPAMMER {
>        type = "country";
>        map = "redis://countryspam";
>        description = "IP Bad country";
>    }
>
>I received this e-mail with country CN (CHINA):
>
>task; rspamd_task_write_log: id:
><121230138.1748866.1541165569955 at smtp.dertw.com>, qid:
><1gIZZG-0008Qe-Es>, ip: 119.122.90.112, from: <jrzefry at fwbp.com>,
>(default: F (no action): [26.25/nan]
>[ONCE_RECEIVED_STRICT(4.00){},BAYES_SPAM(3.75){96.22%;},RCVD_IN_BRBL(3.00){112.90.122.119.b.barracudacentral.org
>:
>127.0.0.2;},RECEIVED_SPAMHAUS_XBL(3.00){112.90.122.119.zen.spamhaus.org
>:
>127.0.0.4;},HFILTER_HOSTNAME_UNKNOWN(2.50){},RBL_SENDERSCORE(2.00){112.90.122.119.bl.score.senderscore.com;},RBL_VIRUSFREE_BOTNET(2.00){112.90.122.119.bip.virusfree.cz
>:
>127.0.0.2;},AUTH_NA(1.00){},FAKE_REPLY(1.00){},HFILTER_HELO_IP_A(1.00){smtp.dertw.com;},RDNS_NONE(1.00){},RECEIVED_SPAMHAUS_CSS(1.00){112.90.122.119.zen.spamhaus.org
>:
>127.0.0.3;},FORGED_SENDER(0.30){yolun56889401 at 163.com;jrzefry at fwbp.com;},HFILTER_HELO_NORES_A_OR_MX(0.30){smtp.dertw.com;},MIME_HTML_ONLY(0.20){},ONCE_RECEIVED(0.10){},RCVD_NO_TLS_LAST(0.10){},ARC_NA(0.00){},ASN(0.00){asn:4134,
>ipnet:119.120.0.0/13, country:CN;},DMARC_NA(0.00){16
>3.com;},FREEMAIL_FROM(0.00){163.com;},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){yolun56889401 at 163.com;jrzefry at fwbp.com;},MX_GOOD(0.00){mailstore1.secureserver.net;smtp.secureserver.net;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ONE(0.00){1;},RECEIVED_SPAMHAUS_PBL(0.00){112.90.122.119.zen.spamhaus.org
>:
>127.0.0.11;},R_DKIM_NA(0.00){},R_SPF_NA(0.00){},TO_DN_ALL(0.00){},IP_SCORE(-0.00){asn:
>4134(0.00), country: CN(-0.00);},TO_MATCH_ENVRCPT_ALL(0.00){}]), len:
>2953, time: 1262.982ms real, 8.399ms virtual, dns req: 26, digest:
><006b5fd93ee25dec79dd7b03d5701418>, rcpts:
><info at latitudsuranglers.com>, mime_rcpts: <info at latitudsuranglers.com>
>2018-11-02 10:32:57 #32331(normal) <6c6748>; task;
>rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned,
>3 regexps matched, 177 regexps total, 105 regexps cached, 0B bytes
>scanned using pcre, 3.81k bytes scanned total
>
>IP: 112.90.122.119
>
>% Information related to '112.88.0.0/13AS4837'
>
>route:          112.88.0.0/13
>descr:          China Unicom CHINA169 Guangdong Province Network
>country:        CN
>origin:         AS4837
>mnt-by:         MAINT-CNCGROUP-RR
>last-modified:  2009-01-12T02:00:10Z
>source:         APNIC
>
>any ideas?
>
>Regards,
>-- 
>Users mailing list
>Users at lists.rspamd.com
>https://lists.rspamd.com/mailman/listinfo/users


More information about the Users mailing list