[Rspamd-Users] understanding scoring in multimaps

[Seibel Andreas]

Hello,

I have a problem understanding the scoring in multimaps. My local.d/multimap.conf:

WHITELIST_FROM_AND_TO {
  type = "combined";
  symbol = "EXCEPTION_FOR_BOB";
  score = -5;
  rules {
    to = {
      map = "$LOCAL_CONFDIR/local.d/rcpt_whitelist.map.inc";
      selector = "to";
    }
    from = {
      map = "$LOCAL_CONFDIR/local.d/sender_whitelist.map.inc";
      selector = "from";
    }
    ip = {
      type = "radix";
      map = "$LOCAL_CONFDIR/local.d/ip_whitelist.map.inc";
      selector = "ip";
    }
  }
#  expression = "from & to & ip"
  expression = "to & from"
#  expression = "to & ip"
#  expression = "from & ip"
}

For the expressions "from & to & ip", "to & ip" and "from & ip" it works as expected, but not for "to & from".
In the case "to & from" symbol "EXCEPTION_FOR_BOB" is set but score is "-0.00" instead of "-5.00".

Example for expression "from & to & ip" (works as expected):

# rspamc --ip 10.10.10.10 --from alice at sender.dom --rcpt bob at recipient.dom < ~/testmail.eml

Results for file: stdin (0.059 seconds)
[Metric: default]
Action: no action
Spam: false
Score: -4.10 / 15.00
Symbol: ARC_NA (0.00)
Symbol: EXCEPTION_FOR_BOB (-5.00)[from=alice at sender.dom, to=bob at recipient.dom, ip=10.10.10.10]
Symbol: FROM_EQ_ENVFROM (0.00)
Symbol: FROM_HAS_DN (0.00)
Symbol: MID_RHS_NOT_FQDN (0.50)
Symbol: MIME_GOOD (-0.10)[multipart/alternative, text/plain]
Symbol: MIME_TRACE (0.00)[0:+, 1:+, 2:~]
Symbol: RCPT_COUNT_ONE (0.00)[1]
Symbol: RCVD_COUNT_ZERO (0.00)[0]
Symbol: R_PARTS_DIFFER (0.50)[100.0%]
Symbol: TO_DN_NONE (0.00)
Symbol: TO_MATCH_ENVRCPT_ALL (0.00)
Message-ID: test-mail at localhost

Example for expression "to & from" (symbol is there but score is "-0.00" instead of "-5.00"):

# rspamc --ip 10.10.10.10 --from alice at sender.dom --rcpt bob at recipient.dom < ~/testmail.eml

Results for file: stdin (0.035 seconds)
[Metric: default]
Action: no action
Spam: false
Score: 0.90 / 15.00
Symbol: ARC_NA (0.00)
Symbol: EXCEPTION_FOR_BOB (-0.00)[to=bob at recipient.dom, from=alice at sender.dom]
Symbol: FROM_EQ_ENVFROM (0.00)
Symbol: FROM_HAS_DN (0.00)
Symbol: MID_RHS_NOT_FQDN (0.50)
Symbol: MIME_GOOD (-0.10)[multipart/alternative, text/plain]
Symbol: MIME_TRACE (0.00)[0:+, 1:+, 2:~]
Symbol: RCPT_COUNT_ONE (0.00)[1]
Symbol: RCVD_COUNT_ZERO (0.00)[0]
Symbol: R_PARTS_DIFFER (0.50)[100.0%]
Symbol: TO_DN_NONE (0.00)
Symbol: TO_MATCH_ENVRCPT_ALL (0.00)
Message-ID: test-mail at localhost

Does anyone have any idea what I'm doing wrong?

Thank you.

Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 831 bytes
Desc: OpenPGP digital signature
URL: <https://lists.rspamd.com/pipermail/users/attachments/20200716/ac1d25f0/attachment.bin>