[Rspamd-Users] Filtering outgoing emails

[Tim Harman]

On 11/05/2019 9:51 am, Philippe Paget wrote:
<<snip snip>>
> X-Spamd-Result: default: False [19.60 / 30.00];
>     ARC_NA(0.00)[];
>     RDNS_NONE(1.00)[];
>     ONCE_RECEIVED(0.10)[];
>     DIRECT_TO_MX(0.00)[K-9 Mail for Android];
>     FROM_HAS_DN(0.00)[];
>     DMARC_POLICY_SOFTFAIL(0.10)[tatm.com : No valid SPF, No valid 
> DKIM,none];
>     TO_MATCH_ENVRCPT_ALL(0.00)[];
>     RBL_SPAMHAUS_XBL(4.00)[198.100.184.92.zen.spamhaus.org : 
> 127.0.0.4];
>     MIME_GOOD(-0.10)[multipart/alternative,text/plain];
>     MIME_TRACE(0.00)[0:+,1:+,2:~];
>     ONCE_RECEIVED_STRICT(4.00)[];
>     R_SPF_SOFTFAIL(0.00)[~all];
>     HFILTER_HELO_BADIP(4.50)[10.88.99.198,1];
>     RCPT_COUNT_ONE(0.00)[1];
>     TO_DN_ALL(0.00)[];
>     VIOLATED_DIRECT_SPF(3.50)[];
>     RCVD_COUNT_ZERO(0.00)[0];
>     TO_EQ_FROM(0.00)[];
>     RCVD_IN_DNSWL_FAIL(0.00)[198.100.184.92.list.dnswl.org:server 
> fail];
>     R_DKIM_NA(0.00)[];
>     ASN(0.00)[asn:3215, ipnet:92.184.100.0/22, country:FR];
>     MID_RHS_MATCH_FROM(0.00)[];
>     HFILTER_HOSTNAME_UNKNOWN(2.50)[];
>     FROM_EQ_ENVFROM(0.00)[]
> 
> 
> I'm stuck on this one, any help greatly appreciate.
> 
> Best regards,
> 
> Phil

Well, you haven't given us much to go on, but from that single header, 
it appears that rspamd is being told the mail is being received from 
92.184.100.198, not a private IP range.
Thus it isn't being subject to the local_addrs relaxed checks.

So you need to go back and understand why that is.  Is your Mobile phone 
(K9 for Android) using it's mobile connection instead of Wifi?

Tim