[Rspamd-Users] Spam from my own address not detected
Yves Goergen
nospam.list at unclassified.de
Tue Apr 27 19:23:09 UTC 2021
Hello,
I keep getting spam mail that has my own e-mail address as envelope
sender. Then I look in the Rspamd log and see that it has this label:
R_SPF_NA (0) [no SPF record]
The tooltip says:
Missing SPF record
Something's wrong here. My domains all have SPF and DKIM records. Why do
I see this message here? What does it mean?
These are the full headers of one of such messages as I receive it:
----------
Return-path: <>
Envelope-to: y****@unclassified.de
Delivery-date: Tue, 27 Apr 2021 21:14:07 +0200
Received: from astmpdsfsdf-i61telefonica.westeurope.cloudapp.azure.com
([23.97.207.120] helo=p89t.resellerratings.com)
by dotforward.de with esmtp (Exim 4.93)
id 1lbT9m-004BGJ-9y
for y****@unclassified.de; Tue, 27 Apr 2021 21:14:07 +0200
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Tue, 27 Apr 2021 18:53:18 +0200
To: y****@unclassified.de
From: "Bitcoin-Handel" <y****@unclassified.de>
Subject:
=?utf-8?Q?Der_Preis_von_Bitcoin_ist_h=C3=B6her_als_seit_zwei_Jahren?=
MIME-Version: 1.0
Message-Id: <E1lbT9m-004BGJ-9y at dotforward.de>
X-Spam-Score: 3.6 (+++)
X-Spam-Report: Scanned by the dotforward mail server
HFILTER_HELO_NORES_A_OR_MX(0.30)
TO_DN_NONE(0.00)
HFILTER_HELO_IP_A(1.00)
SEM_URIBL_FRESH15_UNKNOWN_FAIL(0.00)
URIBL_MULTI_FAIL(0.00)
RCVD_COUNT_ONE(0.00)
RCVD_NO_TLS_LAST(0.10)
TO_EQ_FROM(0.00)
R_DKIM_NA(0.00)
MIME_TRACE(0.00)
ASN(0.00)
SPAMHAUS_FAIL(0.00)
RSPAMD_URIBL_FAIL(0.00)
ONCE_RECEIVED(0.10)
ARC_NA(0.00)
SEM_URIBL_UNKNOWN_FAIL(0.00)
FROM_HAS_DN(0.00)
TO_MATCH_ENVRCPT_ALL(0.00)
SURBL_MULTI_FAIL(0.00)
RCPT_COUNT_ONE(0.00)
DBL_FAIL(0.00)
BLOCKLISTDE_FAIL(0.00)
DMARC_DNSFAIL(0.00)
MIME_HTML_ONLY(0.20)
R_SPF_NA(0.00)
HFILTER_URL_ONLY(1.87)
GREYLIST(0.00)
Message: Try again later
----------
These are all symbols of the entry in Rspamd:
----------
HFILTER_URL_ONLY (1.871642) [0.85074626865672]
HFILTER_HELO_IP_A (1) [p89t.resellerratings.com]
HFILTER_HELO_NORES_A_OR_MX (0.3) [p89t.resellerratings.com]
MIME_HTML_ONLY (0.2)
ONCE_RECEIVED (0.1)
RCVD_NO_TLS_LAST (0.1)
SPAMHAUS_FAIL (0) [23.97.207.120:query timed out]
SEM_URIBL_UNKNOWN_FAIL (0) [farsjoo.com:query timed
out,unclassified.de:query timed out]
TO_EQ_FROM (0)
GREYLIST (0) [greylisted,Tue, 27 Apr 2021 19:19:07 GMT,new record]
ASN (0) [asn:8075, ipnet:23.96.0.0/14, country:US]
SEM_URIBL_FRESH15_UNKNOWN_FAIL (0) [farsjoo.com:query timed
out,unclassified.de:query timed out]
MIME_TRACE (0) [0:~]
RCPT_COUNT_ONE (0) [1]
RSPAMD_URIBL_FAIL (0) [farsjoo.com:query timed out,unclassified.de:query
timed out]
URIBL_MULTI_FAIL (0) [unclassified.de:query timed out,farsjoo.com:query
timed out]
R_DKIM_NA (0)
BLOCKLISTDE_FAIL (0) [23.97.207.120:query timed out]
R_SPF_NA (0) [no SPF record]
SURBL_MULTI_FAIL (0) [farsjoo.com:query timed out,unclassified.de:query
timed out]
DBL_FAIL (0) [farsjoo.com:query timed out]
TO_DN_NONE (0)
ARC_NA (0)
RCVD_COUNT_ONE (0) [1]
DMARC_DNSFAIL (0) [unclassified.de : query timed out]
TO_MATCH_ENVRCPT_ALL (0)
FROM_HAS_DN (0)
----------
More information about the Users
mailing list