[Rspamd-Users] SPF bypass configuration

Bertrand Poulet (BP) bertrand.poulet at pasteur-lille.fr
Thu Sep 24 16:41:44 UTC 2020


Hello,

  someone tries to send us a mail which sender is user at yahoo.fr
the mail doesn't come from yahoo mail server but from another mailhost 
84.xx.yy.zz.
according to SPF policy, the mail is rejected.
How could i permit the mail to go trough our rspamd filter for this 
sender or mailhost ?

could i permit mailhost sender to send us yahoo mail ?
could i permit mail sender (user at yahoo.fr) to bypass SPF policy ?

I've seen the whitelist files as 
/var/lib/rspamd/dkim_whitelist.inc.local, so the score would be 
decreased. Are the mail would be rejected anyway whithout considerring 
the score ?

below the log of
2019-05-13 11:50:35 #26970(rspamd_proxy) <42f745>; proxy; 
rspamd_task_write_log: id: <3385250.464204504.Sixtus8 at 84.x.x.x>,
  qid: <BA88022062F>, ip: 84.xx.yy.zz, from: <user at yahoo.fr>, (default: 
T (reject): [10.99/16.00]
  [HFILTER_HOSTNAME_5(3.00){abcd.clients.net.fr;}
  ,DMARC_POLICY_REJECT(2.00)  {yahoo.fr : No valid SPF, No valid 
DKIM;reject;},
  FORGED_RECIPIENTS(2.00){receiver-init at domain.org;receiver-final at domain.fr;},
  MID_BARE_IP(2.00){},NEURAL_SPAM(1.64){0.547;0;},
  MV_CASE(0.50){},MX_GOOD(-0.50){cached: 
mx-eu.mail.am0.yahoodns.net;},IP_SCORE(0.45){ipnet: 84.x.0.0/16(1.94), 
asn: 4**9(0.24), country: EU(0.07);},MIME_GOOD(-0.10){text/plain;},
  ARC_NA(0.00){},ASN(0.00){asn:4589, ipnet:84.x.0.0/16, 
country:EU;},FREEMAIL_ENVFROM(0.00){yahoo.fr;},FREEMAIL_FROM(0.00){yahoo.fr;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},
  HAS_REPLYTO(0.00){sender at domain.org;},
  MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},RCVD_TLS_ALL(0.00){}, REPLYTO_DOM_NEQ_FROM_DOM(0.00){},
  R_DKIM_NA(0.00){},R_SPF_NEUTRAL(0.00){?all;},TO_DN_NONE(0.00){}]), 
len: 28221, time: 1918.247ms real, 58.967ms virtual, dns req: 21,
  digest: <541f20d8b25179ed3eb803d74e642cf7>, rcpts: 
<receiver-final at domain.fr>, mime_rcpts: <receiver-init at domain.org>,
   forced: reject "Action set by DMARC"; score=nan (set by dmarc)



L'Institut Pasteur de Lille donne la priorité à la lutte contre le coronavirus.
Nos chercheurs ont plus que jamais besoin de votre soutien pour contrer cette épidémie > https://coronavirus.pasteur-lille.fr 


More information about the Users mailing list