[Rspamd-Users] Scoring in a Multimap Type Combined

[Dismas Axel (Thomas)]

Dear RSPAMD Folks,

I have searched in the documentation but cannot find this topic.Therefore, I am asking help in this forum with humble.

Kindly inform.

Thank you,
DISMAS


Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, September 21, 2020 9:38 PM, Dismas Axel \(Thomas\) via Users <users at lists.rspamd.com> wrote:

> Hello Rspamd folks,
>
> I have this configuration at my /etc/rspamd/local.d/multimap.conf:
>
> SAFE_SENDER_LIST_DOMAIN_A {
> type = "combined";
> prefilter = true;
> #action = "accept";
> score = -6.0;
> rules {
> from {
> map = "/etc/rspamd/safe_sender_from_list_domain_a.map";
> selector = "from:addr.lower";
> }
> rcpt = {
> map = "/etc/rspamd/safe_sender_from_list_domain_a_domain.map";
> selector = "rcpts:domain.lower";
> }
> }
> expression = "from & rcpt"
> }
>
> In the file /etc/rspamd/safe_sender_from_list_domain_a.map contains only 1 record for now:
>
> dismasc at protonmail.com
>
> And in the file /etc/rspamd/safe_sender_from_list_domain_a_domain.map contains:
>
> domain_a.com
>
> The goal is to whitelist a sender by its address which is considered safe and known to our employees, e.g: we would like to consider supplier1 at chinadomain.cn as the safe sender, because they send email since 7 years to our company domain at domain_a.com.
>
> After adding this as multimap. I noticed, rspamd recognized and considered the SAFE_SENDER_LIST_DOMAIN_A however, why the score is always 0? My expectation that it will be reduced to -6.0.
>
> MIME_BASE64_TEXT_BOGUS (1)
> DMARC_POLICY_ALLOW
> DMARC permit policy
> (-0.5) [protonmail.com,quarantine]
> R_SPF_ALLOW (-0.2) [+ip4:185.70.40.0/24]
> R_DKIM_ALLOW (-0.2) [protonmail.com:s=protonmail]
> MIME_BASE64_TEXT (0.1)
> MIME_GOOD (-0.1) [multipart/alternative,text/plain]
> MX_GOOD (-0.01) []
> BAYES_SPAM (0.00173) [36.83%]
> ASN (0) [asn:62371, ipnet:185.70.40.0/24, country:CH]
> RCVD_IN_DNSWL_FAIL (0) [185.70.40.27:query refused]
> DKIM_TRACE (0) [protonmail.com:+]
> DWL_DNSWL_FAIL (0) [protonmail.com:query refused,185.70.40.27:query refused]
> HAS_REPLYTO (0) [dismasc at protonmail.com]
> FREEMAIL_ENVFROM (0) [protonmail.com]
> FREEMAIL_FROM (0) [protonmail.com]
> MIME_TRACE (0) [0:+,1:+,2:~]
> MID_RHS_MATCH_FROM (0)
> FREEMAIL_REPLYTO (0) [protonmail.com]
> URIBL_BLOCKED (0) [protonmail.com:dkim]
> RCVD_COUNT_ZERO (0) [0]
>
> SAFE_SENDER_LIST_DOMAIN_A (0) [rcpt=domain_a.com,from=dismasc at protonmail.com]
>
> FROM_EQ_ENVFROM (0)
> ARC_NA (0)
> REPLYTO_EQ_FROM (0)
> HAS_PHPMAILER_SIG (0)
> FROM_HAS_DN (0)
> RCPT_COUNT_ONE (0) [1]
> RWL_MAILSPIKE_POSSIBLE (0) [185.70.40.27:from]
> TO_MATCH_ENVRCPT_ALL (0)
> TO_DN_EQ_ADDR_ALL (0)
>
> I have tried using other type of multimap (not combined), it reduced the score correctly once it meet the criteria. But only in multimap with combined type the scoring does not work. I am not sure if this is a feature that rspamd not yet supported or is a bug?
>
> Thank you,
> Dismas
>
> Sent with ProtonMail Secure Email.
>
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users