[Rspamd-Users] Scoring in a Multimap Type Combined

[Dismas Axel (Thomas)]

Hello Rspamd folks,

I have this configuration at my /etc/rspamd/local.d/multimap.conf:

SAFE_SENDER_LIST_DOMAIN_A {
type = "combined";
prefilter = true;
#action = "accept";
score = -6.0;
rules {
from {
map = "/etc/rspamd/safe_sender_from_list_domain_a.map";
selector = "from:addr.lower";
}
rcpt = {
map = "/etc/rspamd/safe_sender_from_list_domain_a_domain.map";
selector = "rcpts:domain.lower";
}
}
expression = "from & rcpt"
}

In the file /etc/rspamd/safe_sender_from_list_domain_a.map contains only 1 record for now:

dismasc at protonmail.com

And in the file /etc/rspamd/safe_sender_from_list_domain_a_domain.map contains:

domain_a.com

The goal is to whitelist a sender by its address which is considered safe and known to our employees, e.g: we would like to consider [supplier1 at chinadomain.cn](mailto:supplier at chinadomain.cn) as the safe sender, because they send email since 7 years to our company domain at domain_a.com.

After adding this as multimap. I noticed, rspamd recognized and considered the SAFE_SENDER_LIST_DOMAIN_A however, why the score is always 0? My expectation that it will be reduced to -6.0.

MIME_BASE64_TEXT_BOGUS (1)
DMARC_POLICY_ALLOW
DMARC permit policy
(-0.5) [protonmail.com,quarantine]
R_SPF_ALLOW (-0.2) [+ip4:185.70.40.0/24]
R_DKIM_ALLOW (-0.2) [protonmail.com:s=protonmail]
MIME_BASE64_TEXT (0.1)
MIME_GOOD (-0.1) [multipart/alternative,text/plain]
MX_GOOD (-0.01) []
BAYES_SPAM (0.00173) [36.83%]
ASN (0) [asn:62371, ipnet:185.70.40.0/24, country:CH]
RCVD_IN_DNSWL_FAIL (0) [185.70.40.27:query refused]
DKIM_TRACE (0) [protonmail.com:+]
DWL_DNSWL_FAIL (0) [protonmail.com:query refused,185.70.40.27:query refused]
HAS_REPLYTO (0) [dismasc at protonmail.com]
FREEMAIL_ENVFROM (0) [protonmail.com]
FREEMAIL_FROM (0) [protonmail.com]
MIME_TRACE (0) [0:+,1:+,2:~]
MID_RHS_MATCH_FROM (0)
FREEMAIL_REPLYTO (0) [protonmail.com]
URIBL_BLOCKED (0) [protonmail.com:dkim]
RCVD_COUNT_ZERO (0) [0]

SAFE_SENDER_LIST_DOMAIN_A (0) [rcpt=domain_a.com,from=dismasc at protonmail.com]

FROM_EQ_ENVFROM (0)
ARC_NA (0)
REPLYTO_EQ_FROM (0)
HAS_PHPMAILER_SIG (0)
FROM_HAS_DN (0)
RCPT_COUNT_ONE (0) [1]
RWL_MAILSPIKE_POSSIBLE (0) [185.70.40.27:from]
TO_MATCH_ENVRCPT_ALL (0)
TO_DN_EQ_ADDR_ALL (0)

I have tried using other type of multimap (not combined), it reduced the score correctly once it meet the criteria. But only in multimap with combined type the scoring does not work. I am not sure if this is a feature that rspamd not yet supported or is a bug?

Thank you,
Dismas

Sent with [ProtonMail](https://protonmail.com) Secure Email.