[Rspamd-Users] Strange score URIBL_SBL

[Alexander Moisseev]

On 18.06.2019 10:21, Frédéric Goudal wrote:
> Hello,
> 
> One of my mail was rejected with the following score :
> 
> [32.50/15.00] [URIBL_SBL(32.50){discordapp.com;},MIME_BASE64_TEXT(0.10){},MIME_GOOD(-0.10){text/plain;},ARC_NA(0.00){},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_XOIP(0.00){},NEURAL_SPAM(0.00){1.000;0;},RCP\
> T_COUNT_THREE(0.00){3;},RCVD_COUNT_THREE(0.00){4;},RCVD_NO_TLS_LAST(0.00){},TO_DN_ALL(0.00){},TO_MATCH_ENVRCPT_SOME(0.00){}]),
> 
> The 32.50 score is strange, but… in the log I find five lines :
> 019-06-17 08:37:18 #2249(normal) <387e61>; surbl; process_dns_results: <7db29c6d84374a9785ea34287e280950 at xxxx> domain [discordapp.com] is in surbl sbl.spamhaus.org(200007f)
> 2019-06-17 08:37:18 #2249(normal) <387e61>; surbl; process_dns_results: <7db29c6d84374a9785ea34287e280950 at xxxx> domain [discordapp.com] is in surbl sbl.spamhaus.org(200007f)
> 2019-06-17 08:37:18 #2249(normal) <387e61>; surbl; process_dns_results: <7db29c6d84374a9785ea34287e280950 at xxxx> domain [discordapp.com] is in surbl sbl.spamhaus.org(200007f)
> 2019-06-17 08:37:18 #2249(normal) <387e61>; surbl; process_dns_results: <7db29c6d84374a9785ea34287e280950 at xxxx> domain [discordapp.com] is in surbl sbl.spamhaus.org(200007f)
> 2019-06-17 08:37:18 #2249(normal) <387e61>; surbl; process_dns_results: <7db29c6d84374a9785ea34287e280950 at xxxxl> domain [discordapp.com] is in surbl sbl.spamhaus.org(200007f)
> 
> The score for URIBL_SBL ist 6.5 and five time is 32.6
> 
> BUT…
> 
> I have another server which got the same mail with the same filve  log messages but the final score for URIBL_SBL ist 6.5
> 
> How to explain the differnce ?
> 

Make sure you have "one_shot = true;" in the URIBL_SBL section.