[Rspamd-Users] SPF bypass configuration
Bertrand Poulet (BP)
bertrand.poulet at pasteur-lille.fr
Thu Sep 24 16:41:44 UTC 2020
Hello,
someone tries to send us a mail which sender is user at yahoo.fr
the mail doesn't come from yahoo mail server but from another mailhost
84.xx.yy.zz.
according to SPF policy, the mail is rejected.
How could i permit the mail to go trough our rspamd filter for this
sender or mailhost ?
could i permit mailhost sender to send us yahoo mail ?
could i permit mail sender (user at yahoo.fr) to bypass SPF policy ?
I've seen the whitelist files as
/var/lib/rspamd/dkim_whitelist.inc.local, so the score would be
decreased. Are the mail would be rejected anyway whithout considerring
the score ?
below the log of
2019-05-13 11:50:35 #26970(rspamd_proxy) <42f745>; proxy;
rspamd_task_write_log: id: <3385250.464204504.Sixtus8 at 84.x.x.x>,
qid: <BA88022062F>, ip: 84.xx.yy.zz, from: <user at yahoo.fr>, (default:
T (reject): [10.99/16.00]
[HFILTER_HOSTNAME_5(3.00){abcd.clients.net.fr;}
,DMARC_POLICY_REJECT(2.00) {yahoo.fr : No valid SPF, No valid
DKIM;reject;},
FORGED_RECIPIENTS(2.00){receiver-init at domain.org;receiver-final at domain.fr;},
MID_BARE_IP(2.00){},NEURAL_SPAM(1.64){0.547;0;},
MV_CASE(0.50){},MX_GOOD(-0.50){cached:
mx-eu.mail.am0.yahoodns.net;},IP_SCORE(0.45){ipnet: 84.x.0.0/16(1.94),
asn: 4**9(0.24), country: EU(0.07);},MIME_GOOD(-0.10){text/plain;},
ARC_NA(0.00){},ASN(0.00){asn:4589, ipnet:84.x.0.0/16,
country:EU;},FREEMAIL_ENVFROM(0.00){yahoo.fr;},FREEMAIL_FROM(0.00){yahoo.fr;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},
HAS_REPLYTO(0.00){sender at domain.org;},
MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},RCVD_TLS_ALL(0.00){}, REPLYTO_DOM_NEQ_FROM_DOM(0.00){},
R_DKIM_NA(0.00){},R_SPF_NEUTRAL(0.00){?all;},TO_DN_NONE(0.00){}]),
len: 28221, time: 1918.247ms real, 58.967ms virtual, dns req: 21,
digest: <541f20d8b25179ed3eb803d74e642cf7>, rcpts:
<receiver-final at domain.fr>, mime_rcpts: <receiver-init at domain.org>,
forced: reject "Action set by DMARC"; score=nan (set by dmarc)
L'Institut Pasteur de Lille donne la priorité à la lutte contre le coronavirus.
Nos chercheurs ont plus que jamais besoin de votre soutien pour contrer cette épidémie > https://coronavirus.pasteur-lille.fr
More information about the Users
mailing list