[Rspamd-Users] SOLVED Re: Disable outbound X-Spam header : Mystery solved

[Sophie Loewenthal]

> On 16 Jun 2020, at 15:55, Sophie Loewenthal <sophie at klunky.co.uk> wrote:
> 
> On 16 Jun 2020, at 3:33 pmail10, Gerald Galster <list+rspamd at gcore.biz> wrote:
> 
> Hi,
> 
>> Some email servers rejected our email because it contained the header  X-Spam: yes 
> 
> rspamd honors externally set x-spam headers if they are not removed:
> 
> reconf['SPAM_FLAG'] = {
> re = string.format('%s || %s || %s',
>     'X-Spam-Flag=/^(?:yes|true)/Hi',
>     'X-Spam=/^(?:yes|true)/Hi',
>     'X-Spam-Status=/^(?:yes|true)/Hi'),
> score = 5.0,
> description = "Message was already marked as spam",
> group = 'upstream_spam_filters'
> }
> 
> 
>> I am doubtful that rspamd marked my email as spam, but hey I shall check the logs when I get into work.
>> 
>> In the meantime, how may I stop rspamd from adding an X-Spam header to any authenticated outbound email?
> 
> If you're using milter (/etc/rspamd/local.d/milter_headers.conf), see
> 
> https://rspamd.com/doc/modules/milter_headers.html
> 
> sections local headers, authenticated headers or removing headers, like
> 
> headers {
> "X-Spam-Flag" = 0;
> "X-Spam-Status" = 0;
> "X-Spam-Report" = 0;
> "X-Spam-Level" = 0;
> "X-Spam-Checker-Version" = 0;
> }
> 
> Best regards
> Gerald
> -- 
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users
> 
> Hi,
> 
> I refer to our own smtp-auth email, and not to external messages passed through our systems.  
> 
> e.g an smtp-auth user submits an email to our postfix, which passes to rspamd milter. Rspamd incorrectly adds an X-Spam: yes 
> This was a false positive.


Hi, 

I checked again when I got in. 

OK, I did something idiotic because I misunderstood the actions.conf file. 

I had set "add_header = 1;" thinking it would add X-Spam: {$result}. So for  ham X-Spam: No and for spam X-Spam: Yes.  But add_header defines when X-Spam: {$result} is spam!   Changed this and restarted Rspamd and all is well.


The logs recorded,
2020-06-16 19:08:37 #1125(normal) <b549d0>; task; rspamd_task_write_log: id: <BB56345F-C3C6-414A-9C8A-FFFCE0E5C572 at example.org>, qid: <2CFB95B>, ip: 11.11.11.11, user: user at example.org, from: <user at example.org>, (default: T (add header): [2.90/20.00] [HEADER_FORGED_MDN(2.00){},MV_CASE(0.50){},SUBJECT_ENDS_SPACES(0.50){},MIME_GOOD(-0.10){multipart/alternative;text/plain;multipart/related;},ARC_NA(0.00){},ASN(0.00){asn:47377, ipnet:11.11.0.0/13, ...


Best, S