[Rspamd-Users] Email lookups only on headers?

[Vsevolod Stakhov]

On 25/03/2020 13:07, Riccardo Alfieri wrote:
> Hello,
> 
> I looked in the documentation and didn't find anything. If there is
> something that I miss apologies for the stupid question :)
> 
> I'm running rspamd 2.4-2~buster and while debugging the rbl module
> (debug_modules = ["rbl"] in logging.inc) noticed that the RBLs that deal
> with email addresses (MSBL, Rspamd) apparently aren't checked with email
> addresses found in body.
> 
> In rspamd.log I find these lines:
> ...
> 2020-03-25 12:53:53 #20924(controller) <111bac>; rbl; rbl.lua:649: check
> replyto {[addr] = redacted at redacted.com, [flags] = {[braced] = true,
> [valid]
> = true}, [user] = redacted, [name] = Name S, [domain] = redacted.com}
> 2020-03-25 12:53:53 #20924(controller) <111bac>; rbl; rbl.lua:791: rbl
> MSBL_EBL; resolve redacted at redacted.com -> <hash>.ebl.msbl.org
> ...
> 
> That is indeed the email address in the Reply-To header and is correctly
> checked
> 
> However, in the email body there is another email, that is detected when
> I run "rspamc sample.eml" and look at the output:
> 
> ...
> Emails: ["redacted at gmail.com"]
> ...
> 
> But I don't see the corresponding lookup for this address in the logfile.
> 
> Is that an expected behaviour or I am missing something?
> 

I think it is related to whitelisting.