[Rspamd-Users] How to deliver spam anyway?
David Reagan
me at davidreagan.net
Sat Sep 19 16:47:13 UTC 2020
Hey all,
I'd like to configure rspamd to deliver spam after it detects it. I have
sieve configured to move spam into the Spam folder. That way users can
check for any messages that got sent to spam when they shouldn't have.
I think I've configured /etc/rspamd/override.d/actions.conf to make
rspamd work that way, but I'm stuck on how to test..
My actions.conf:
```
add_header = 6; # Add header when reaching this score
greylist = 4; # Apply greylisting when reaching this score (will
emit `soft reject action`)
subject = "[SPAM] %s"
```
I'm hoping that making `reject = 15` not set will give me the behavior I
want.
To test in my dev environment, I've set `enable_test_patterns = true;`,
and then I've been sending the GTUBE pattern. But as far as I can tell,
rspamd just always rejects it. The only thing my override file did was
let Thunderbird finishing sending the message. But the message never got
past rspamd.
I see the logs in rspamd, but no logs show up in dovecot or postfix.
```
example_spamfilter | 2020-09-19 16:21:39 #8(normal) <160c86>; task;
rspamd_check_gtube: gtube reject pattern has been found in part of length 72
example_spamfilter | 2020-09-19 16:21:39 #8(normal) <160c86>; task;
rspamd_add_passthrough_result:
<db990a2a-67a8-b60d-1227-a60d593c5dce at redteam-example.org>: set
pre-result to 'reject' (15.00): 'Gtube pattern' from GTUBE(3)
example_spamfilter | 2020-09-19 16:21:39 #8(normal) <160c86>; task;
rspamd_task_write_log: id:
<db990a2a-67a8-b60d-1227-a60d593c5dce at redteam-example.org>, qid:
<2C93E160737>, ip: 192.168.113.1, user: kirk at redteam-example.org, from:
<kirk at redteam-example.org>, (default: S (reject): [15.00/15.00]
[GTUBE(0.00){}]), len: 492, time: 69.768ms, dns req: 0, digest:
<3ae5f215290df6e9185b5c41574d0302>, rcpts: <postmaster at example.org>,
mime_rcpts: <postmaster at example.org>, forced: reject "Gtube pattern";
score=15.00 (set by GTUBE)
```
Sending the add header and rewrite subject patterns does seem to work.
But their spam score is zero. So sieve will not detect them as spam.
So I'm left scratching my head...
Am I configuring rspamd in a way that will deliver spam messages?
How can I test that?
Just in case it's useful, here is how I've configured postfix to work
with rspamd.
/etc/postfix/main.cf
```
# rspamd
smtpd_milters = inet:spamfilter:11332
milter_default_action = accept
non_smtpd_milters = $smtpd_milters
```
Thanks in advance!
- David
More information about the Users
mailing list