[Rspamd-Users] understanding scoring in multimaps

[Seibel Andreas]

Am 16.07.2020 um 13:17 schrieb Seibel Andreas:
> Hello,
>
> I have a problem understanding the scoring in multimaps. My local.d/multimap.conf:
>
> WHITELIST_FROM_AND_TO {
>    type = "combined";
>    symbol = "EXCEPTION_FOR_BOB";
>    score = -5;
>    rules {
>      to = {
>        map = "$LOCAL_CONFDIR/local.d/rcpt_whitelist.map.inc";
>        selector = "to";
>      }
>      from = {
>        map = "$LOCAL_CONFDIR/local.d/sender_whitelist.map.inc";
>        selector = "from";
>      }
>      ip = {
>        type = "radix";
>        map = "$LOCAL_CONFDIR/local.d/ip_whitelist.map.inc";
>        selector = "ip";
>      }
>    }
> #  expression = "from & to & ip"
>    expression = "to & from"
> #  expression = "to & ip"
> #  expression = "from & ip"
> }
>
> For the expressions "from & to & ip", "to & ip" and "from & ip" it works as expected, but not for "to & from".
> In the case "to & from" symbol "EXCEPTION_FOR_BOB" is set but score is "-0.00" instead of "-5.00".
>
> Example for expression "from & to & ip" (works as expected):
>
> # rspamc --ip 10.10.10.10 --from alice at sender.dom --rcpt bob at recipient.dom < ~/testmail.eml
>
> Results for file: stdin (0.059 seconds)
> [Metric: default]
> Action: no action
> Spam: false
> Score: -4.10 / 15.00
> Symbol: ARC_NA (0.00)
> Symbol: EXCEPTION_FOR_BOB (-5.00)[from=alice at sender.dom, to=bob at recipient.dom, ip=10.10.10.10]
> Symbol: FROM_EQ_ENVFROM (0.00)
> Symbol: FROM_HAS_DN (0.00)
> Symbol: MID_RHS_NOT_FQDN (0.50)
> Symbol: MIME_GOOD (-0.10)[multipart/alternative, text/plain]
> Symbol: MIME_TRACE (0.00)[0:+, 1:+, 2:~]
> Symbol: RCPT_COUNT_ONE (0.00)[1]
> Symbol: RCVD_COUNT_ZERO (0.00)[0]
> Symbol: R_PARTS_DIFFER (0.50)[100.0%]
> Symbol: TO_DN_NONE (0.00)
> Symbol: TO_MATCH_ENVRCPT_ALL (0.00)
> Message-ID: test-mail at localhost
>
> Example for expression "to & from" (symbol is there but score is "-0.00" instead of "-5.00"):
>
> # rspamc --ip 10.10.10.10 --from alice at sender.dom --rcpt bob at recipient.dom < ~/testmail.eml
>
> Results for file: stdin (0.035 seconds)
> [Metric: default]
> Action: no action
> Spam: false
> Score: 0.90 / 15.00
> Symbol: ARC_NA (0.00)
> Symbol: EXCEPTION_FOR_BOB (-0.00)[to=bob at recipient.dom, from=alice at sender.dom]
> Symbol: FROM_EQ_ENVFROM (0.00)
> Symbol: FROM_HAS_DN (0.00)
> Symbol: MID_RHS_NOT_FQDN (0.50)
> Symbol: MIME_GOOD (-0.10)[multipart/alternative, text/plain]
> Symbol: MIME_TRACE (0.00)[0:+, 1:+, 2:~]
> Symbol: RCPT_COUNT_ONE (0.00)[1]
> Symbol: RCVD_COUNT_ZERO (0.00)[0]
> Symbol: R_PARTS_DIFFER (0.50)[100.0%]
> Symbol: TO_DN_NONE (0.00)
> Symbol: TO_MATCH_ENVRCPT_ALL (0.00)
> Message-ID: test-mail at localhost
>
> Does anyone have any idea what I'm doing wrong?
>
> Thank you.
>
> Andreas
>
>

Hi,

anybody got any ideas? Or does nobody use combined multimaps?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 831 bytes
Desc: OpenPGP digital signature
URL: <https://lists.rspamd.com/pipermail/users/attachments/20200720/64a8c15a/attachment.bin>