[Rspamd-Users] Help needed with DKIM and ARC (mis)configuration please

Philip Colmer philip.colmer at linaro.org
Mon Sep 20 07:38:09 UTC 2021


I'm trying to configure rspamd so that it provides all of the DKIM and
ARC handling when used in conjunction with Mailman 3. I'm using
Postfix as the MTA.

DKIM itself seems to be working, in that if Mailman 3 sends (say) a
password reset email, the receiving mail system says that the DKIM
headers are OK:

Delivered-To: philip.colmer at codelinaro.org
Received-SPF: pass (zohomail.com: domain of mm3.lavasoftware.org
designates 3.230.84.86 as permitted sender) client-ip=3.230.84.86;
envelope-from=postorius at mm3.lavasoftware.org;
helo=mm3.lavasoftware.org;
Authentication-Results: mx.zohomail.com;
    dkim=pass;
    spf=pass (zohomail.com: domain of mm3.lavasoftware.org designates
3.230.84.86 as permitted sender)
smtp.mailfrom=postorius at mm3.lavasoftware.org
ARC-Seal: i=1; a=rsa-sha256; t=1632122989; cv=none;
    d=zohomail.com; s=zohoarc;
    b=ANrhqpZBbcyb5vTHyW8/oZGzKVK+fqUVpAoqRToZ0ybk6nplq5gcj2MWN12osnpIT8XQzKx1W1VZ7yTnmsxZgMczbgLgGgu5DrQU8sz7kjGOoiUEMicJCga82GGHK6X6cFNF2Am83S3Hs2PRoIuriaPggASbTqLZ4gzNHuLlavw=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=zohomail.com; s=zohoarc;
    t=1632122989;
h=Content-Type:Content-Transfer-Encoding:Date:From:MIME-Version:Message-ID:Subject:To;
    bh=Na5VyfB/MJFBjvpUi2TPUqikg420+PNUB2IXz4sZ3tw=;
    b=Ftpt4gX7nhNfDsuwEKH3X2gmu0Fo446u9IRLut6Y93QCJL0dP2/5funAQhcT5RwBglyeH/LMMCs6tu+0sFnSDteNLPbkmbLjK9uZtCnk42+uBRUqEdbPy8DSqgxUclA9KwKvIkd3asld0c8yMxo7u9jMdnkBs6TxeCphReF3vho=
ARC-Authentication-Results: i=1; mx.zohomail.com;
    dkim=pass;
    spf=pass (zohomail.com: domain of mm3.lavasoftware.org designates
3.230.84.86 as permitted sender)
smtp.mailfrom=postorius at mm3.lavasoftware.org
Return-Path: <postorius at mm3.lavasoftware.org>
Received: from mm3.lavasoftware.org (mm3.lavasoftware.org
[3.230.84.86]) by mx.zohomail.com
    with SMTPS id 1632122989893975.8082437998135; Mon, 20 Sep 2021
00:29:49 -0700 (PDT)
Received: from ip-172-31-2-177.ec2.internal (localhost [127.0.0.1])
    by mm3.lavasoftware.org (Postfix) with ESMTP id 4B440BE547
    for <philip.colmer at codelinaro.org>; Mon, 20 Sep 2021 07:29:48 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mm3.lavasoftware.org;
    s=dkim; t=1632122988;
    h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
     to:to:cc:mime-version:mime-version:content-type:content-type:
     content-transfer-encoding:content-transfer-encoding;
    bh=Na5VyfB/MJFBjvpUi2TPUqikg420+PNUB2IXz4sZ3tw=;
    b=k5LcpvNvZ3l0tCjoCy+T25HotZtilhzOtLmBUnC+nsja6gB/F/rrqTAYU3XcXKMvNATf2T
    gLrmn+kLVKv3dbCJyfaJyZqYIcK37klx/Cb88kv6m2vq6FSTtFiQZpzqGv9AvhPYK2BiZx
    +lHq0bmlJ6fp2jRbI5T9WbwtzzrJNUs=
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: [lavasoftware.org] Password Reset E-mail
From: postorius at mm3.lavasoftware.org
To: philip.colmer at codelinaro.org
Date: Mon, 20 Sep 2021 07:29:48 -0000
Message-ID: <163212298829.38042.11881199049009320543 at ip-172-31-2-177.ec2.internal>
X-ZohoMail-DKIM: pass (identity @mm3.lavasoftware.org)
X-ZohoMail-Owner:
<163212298829.38042.11881199049009320543 at ip-172-31-2-177.ec2.internal>+zmo_0_postorius at mm3.lavasoftware.org

However, if I post to a mailing list on the server, the received email
is not considered to be OK:

Delivered-To: philip.colmer at codelinaro.org
Received-SPF: pass (zohomail.com: domain of mm3.lavasoftware.org
designates 3.230.84.86 as permitted sender) client-ip=3.230.84.86;
envelope-from=test-bounces+philip.colmer=codelinaro.org at mm3.lavasoftware.org;
helo=mm3.lavasoftware.org;
Authentication-Results: mx.zohomail.com;
    dkim=pass;
    spf=pass (zohomail.com: domain of mm3.lavasoftware.org designates
3.230.84.86 as permitted sender)
smtp.mailfrom=test-bounces+philip.colmer=codelinaro.org at mm3.lavasoftware.org;
    arc=fail (BodyHash is different from the expected one)
Return-Path: <test-bounces+philip.colmer=codelinaro.org at mm3.lavasoftware.org>
Received: from mm3.lavasoftware.org (mm3.lavasoftware.org
[3.230.84.86]) by mx.zohomail.com
    with SMTPS id 1632121826593429.3377835910852; Mon, 20 Sep 2021
00:10:26 -0700 (PDT)
Received: from ip-172-31-2-177.ec2.internal (localhost [127.0.0.1])
    by mm3.lavasoftware.org (Postfix) with ESMTP id ABFAFBEA8D
    for <philip.colmer at codelinaro.org>; Mon, 20 Sep 2021 07:10:25 +0000 (UTC)
Received: from sender4-op-o14.zoho.com (sender4-op-o14.zoho.com
[136.143.188.14])
    by mm3.lavasoftware.org (Postfix) with ESMTPS id B5FC1BE61C
    for <test at mm3.lavasoftware.org>; Mon, 20 Sep 2021 07:10:22 +0000 (UTC)
Received: from mail.zoho.com by mx.zohomail.com
    with SMTP id 1632121819028942.4423330943655; Mon, 20 Sep 2021
00:10:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mm3.lavasoftware.org;
    s=dkim; t=1632121825;
h=from:from:reply-to:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:list-id:list-help:list-owner:
     list-unsubscribe:list-subscribe:list-post;
    bh=zJ40PoiQolFhFDNtGN6hEUNOJtDCnSu+T+9+9qkGBJ4=;
    b=WlzzQQsEEiRUF2Bw3fKEHZ/v7CC0euY/qUEwLjhOy0jPNoKhCE1YuO+O2+AcaUAxneufqN
    RzZEPtbIYZm29w1jG5ZYoNmiDA42+v8ZasIagWc50+ryWDnX4YSSYk4RMBCXwznu5HBMjL
    DrRDPq4Q92WdPKsYho3ABb97Hzl4mlI=
ARC-Seal: i=1; a=rsa-sha256; t=1632121820; cv=none;
    d=zohomail.com; s=zohoarc;
    b=I7Nm7s4ikypN7iEcMzmWleseGtYzQUx2e72QEwV2hXKXxVQs0yrbx2744dcbNFAJgOMJl7C0PMFWVEMTm5uiFxN+zLwpvNJ5i9Sw5XQXNzkP4yuVBGC8R2+ZJ+I2W8e3dxsdOp1SZL7ROMEnbISXaIKLWAOmB8H0Cu8etwTuCHA=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=zohomail.com; s=zohoarc;
    t=1632121820; h=Content-Type:Date:From:MIME-Version:Message-ID:Subject:To;
    bh=UafOni038olf8S2QOrAIdd1uG+CPy6lUXSacJpOh40o=;
    b=DzYG0hVPiGOGagfchCVHJFkl1R9H2EvvB338GBsKGauzUtwLSIs3clIyoyr3vLTG2uBZYHZGSZk1JeODyAg/Y9x8UluqA1V4kUU5TITVyaX3dUslHhaXW5FP5ds1hK4+08lLan9SLKXtRrfNPonGG8B9umRieCpno8AcodDo+Ak=
ARC-Authentication-Results: i=1; mx.zohomail.com;
    dkim=pass header.i=codelinaro.org;
    spf=pass smtp.mailfrom=philip.colmer at codelinaro.org;
    dmarc=pass header.from=<philip.colmer at codelinaro.org>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1632121820;
    s=zoho; d=codelinaro.org; i=philip.colmer at codelinaro.org;
    h=Date:From:To:Message-Id:Subject:MIME-Version:Content-Type;
    bh=UafOni038olf8S2QOrAIdd1uG+CPy6lUXSacJpOh40o=;
    b=Ay3K1SsWxWR+ehw1xplPkf4c61D/hsK3rNDtV/gl1SpH5odBdVQtn+tD4X/jmSzo
    v4dlnV5v/SEu5bEKcx1+1t+jhOlqKoxpip2/O3i75KRbQutUoGKmS46c9Pd6l8q4/ww
    k7z05XUAHJIwOE0GcLJ+75UMvjPoOZTPNX2Xuk0k=
Date: Mon, 20 Sep 2021 08:10:19 +0100
To: "test" <test at mm3.lavasoftware.org>
Message-Id: <17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>
MIME-Version: 1.0
Importance: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed;
    d=mm3.lavasoftware.org; s=dkim; t=1632121823;
    h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
     to:to:cc:mime-version:mime-version:content-type:content-type:
     dkim-signature; bh=UafOni038olf8S2QOrAIdd1uG+CPy6lUXSacJpOh40o=;
    b=kd2l8DuYzeIwb+IV2iAe4QPqaTbpc11il+5GRnG6n38/kj2o7wbsbxSz/Xc9K2GndFHMcC
    zq8VXuca+inWtDsbiPPPUOP4T8HhfbhXOpCFGFrkb5kdCxju8dJ+HZeExVfgAQkPONBQIU
    NAUuuls+jnysLBLmeg8yy1lFOGXHKq8=
ARC-Authentication-Results: i=2;
    mm3.lavasoftware.org;
    dkim=pass header.d=codelinaro.org header.s=zoho header.b=Ay3K1SsW;
    dmarc=none;
    arc=pass ("zohomail.com:s=zohoarc:i=1");
    spf=pass (mm3.lavasoftware.org: domain of
philip.colmer at codelinaro.org designates 136.143.188.14 as permitted
sender) smtp.mailfrom=philip.colmer at codelinaro.org
ARC-Seal: i=2; s=dkim; d=mm3.lavasoftware.org; t=1632121823; a=rsa-sha256;
    cv=pass;
    b=sL4/9K5tcg3NqHS1Cn5HMUFqO02DB43na23WyE3ke6AB1igpY/1o7xDYvt6Vqu9OMc8X/7
    Tn75o1hi2cUrXD2Ju40FxirvG3Rwa47CzfvrHRXv6KhaYAe01Qbb1zmKe6ECV1MZxRy/OA
    52z4ccr1QBVCAM/j6BSSgNcO3uk13A4=
Message-ID-Hash: DJXYU37XDC54P2YNVHOUQOM5ILEFDLGG
X-Message-ID-Hash: DJXYU37XDC54P2YNVHOUQOM5ILEFDLGG
X-MailFrom: philip.colmer at codelinaro.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved;
emergency; loop; banned-address; member-moderation;
nonmember-moderation; administrivia; implicit-dest; max-recipients;
max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.4
Precedence: list
Subject: [Test] Another ARC test email
List-Id: <test.mm3.lavasoftware.org>
Archived-At: <>
List-Archive: <>
List-Help: <mailto:test-request at mm3.lavasoftware.org?subject=help>
List-Owner: <mailto:test-owner at mm3.lavasoftware.org>
List-Post: <mailto:test at mm3.lavasoftware.org>
List-Subscribe: <mailto:test-join at mm3.lavasoftware.org>
List-Unsubscribe: <mailto:test-leave at mm3.lavasoftware.org>
From: Philip Colmer via Test <test at mm3.lavasoftware.org>
Reply-To: Philip Colmer <philip.colmer at codelinaro.org>
Content-Type: multipart/mixed; boundary="===============4180264220719142576=="
X-ZohoMail-DKIM: pass (identity @mm3.lavasoftware.org)

local.d/arc.conf:
allow_hdrfrom_mismatch = true;
allow_username_mismatch = true;
use_esld = false;
domain {
    mm3.lavasoftware.org {
        selector = "dkim";
        path = "/var/lib/rspamd/dkim/mm3.lavasoftware.org.dkim.key";
    }
}

local.d/dkim_signing.conf:
allow_hdrfrom_mismatch_sign_networks = true;
allow_username_mismatch = true;
domain {
    mm3.lavasoftware.org {
        selector = "dkim";
        path = "/var/lib/rspamd/dkim/mm3.lavasoftware.org.dkim.key";
    }
}
use_esld = false;
sign_authenticated = false;
use_domain = "header";
allow_hdrfrom_mismatch = true;

local.d/worker-proxy.inc:
milter = yes; # Enable milter mode
timeout = 120s; # Needed for Milter usually
upstream "local" {
  default = yes; # Self-scan upstreams are always default
  self_scan = yes; # Enable self-scan
}
count = 4; # Spawn more processes in self-scan mode
max_retries = 5; # How many times master is queried in case of failure
discard_on_reject = false; # Discard message instead of rejection
quarantine_on_reject = false; # Tell MTA to quarantine rejected messages
spam_header = "X-Spam"; # Use the specific spam header
reject_message = "Spam message rejected"; # Use custom rejection message

local.d/worker-normal.inc:
enabled = false;

Postfix configuration extract for the milter:

#smtpd_milters = unix:/var/lib/rspamd/milter.sock
# or for TCP socket
smtpd_milters = inet:localhost:11332
non_smtpd_milters = inet:localhost:11332

# skip mail without checks if something goes wrong
milter_default_action = accept

# 6 is the default milter protocol version;
# prior to Postfix 2.6 the default protocol was 2.
# milter_protocol = 6

When the email originally comes in to be submitted to the mailing
list, I think these are the relevant lines from the rspamd log:

2021-09-20 07:10:22 #37324(rspamd_proxy) <8e1c5c>; proxy;
proxy_accept_socket: accepted milter connection from 127.0.0.1 port
36088
2021-09-20 07:10:22 #37324(rspamd_proxy) <8e1c5c>; milter;
rspamd_milter_process_command: got connection from
136.143.188.14:17451
2021-09-20 07:10:22 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_message_parse: loaded message; id:
<17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>;
queue-id: <B5FC1BE61C>; size: 2400; checksum:
<9f4bf024cb485cbef8e1b1e030a48b9b>
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_spf_maybe_return: stored record for codelinaro.org
(0x4d20af7734be3ae1) in LRU cache for 300 seconds, 2/2000 elements in
the cache
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
dkim_module_key_handler: stored DKIM key for
zoho._domainkey.codelinaro.org in LRU cache for 300 seconds, 2/2000
elements in the cache
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_stat_classifiers_process: skip statistics as SPAM class is
missing
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; lua;
greylist.lua:318: Score too low - skip greylisting
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; lua;
neural.lua:315: skip ham sample to keep spam/ham balance; probability
1; 0 spam and 1 ham vectors stored
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_task_write_log: id:
<17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>, qid:
<B5FC1BE61C>, ip: 136.143.188.14, from:
<philip.colmer at codelinaro.org>, (default: F (no action): [-1.49/15.00]
[ARC_ALLOW(-1.00){zohomail.com:s=zohoarc:i=1;},R_DKIM_ALLOW(-0.20){codelinaro.org:s=zoho;},R_SPF_ALLOW(-0.20){+ip4:136.143.188.0/24;},MIME_GOOD(-0.10){multipart/alternative;text/plain;},XM_UA_NO_VERSION(0.01){},ARC_SIGNED(0.00){mm3.lavasoftware.org:s=dkim:i=2;},ASN(0.00){asn:2639,
ipnet:136.143.188.0/23,
country:US;},DKIM_TRACE(0.00){codelinaro.org:+;},DMARC_NA(0.00){codelinaro.org;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_TWO(0.00){2;},RCVD_IN_DNSWL_NONE(0.00){136.143.188.14:from;},RCVD_TLS_LAST(0.00){},RWL_MAILSPIKE_POSSIBLE(0.00){136.143.188.14:from;},TO_DN_ALL(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]),
len: 2400, time: 294.179ms, dns req: 27, digest:
<9f4bf024cb485cbef8e1b1e030a48b9b>, rcpts:
<test at mm3.lavasoftware.org>, mime_rcpts: <test at mm3.lavasoftware.org>
2021-09-20 07:10:23 #37324(rspamd_proxy) <8e1c5c>; proxy;
rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned,
4 regexps matched, 176 regexps total, 84 regexps cached, 0B scanned
using pcre, 1.00KiB scanned total
2021-09-20 07:10:23 #37324(rspamd_proxy) <378793>; proxy;
proxy_milter_finish_handler: finished milter connection

Then, when Mailman is sending the modified email back out, these are
the relevant lines:

2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
proxy_accept_socket: accepted milter connection from 127.0.0.1 port
36142
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; milter;
rspamd_milter_process_command: got connection from 127.0.0.1:54506
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_message_parse: loaded message; id:
<17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>;
queue-id: <5C73ABE61C>; size: 5079; checksum:
<dc5a7d4f5acc7e072e651fb61d0d43d5>
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_mime_part_detect_language: detected part language: en
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; lua;
greylist.lua:204: skip greylisting for local networks and/or
authorized users
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
dkim_symbol_callback: skip DKIM checks for local networks and
authorized users
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; lua; spf.lua:186:
skip SPF checks for local networks and authorized users
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; lua; dmarc.lua:349:
skip DMARC checks as either SPF or DKIM were not checked
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; lua;
once_received.lua:99: Skipping once_received for authenticated user or
local network
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; dkim;
rspamd_dkim_check: arc_sig: bh value mismatch: got
lBu5g1QPVcNe04bBZ1chCV35tI3E+GY1OFtuw7mUsAY=, expected
UafOni038olf8S2QOrAIdd1uG+CPy6lUXSacJpOh40o=; body length 1081->1079;
d=mm3.lavasoftware.org; s=dkim
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_stat_classifiers_process: skip statistics as SPAM class is
missing
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; lua;
greylist.lua:318: Score too low - skip greylisting
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_task_write_log: id:
<17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>, qid:
<5C73ABE61C>, ip: 127.0.0.1, from:
<test-bounces at mm3.lavasoftware.org>, (default: F (no action):
[0.80/15.00] [ARC_REJECT(1.00){signature check failed: fail, {[1] =
sig:mm3.lavasoftware.org:reject};},MAILLIST(-0.20){mailman;},MIME_GOOD(-0.10){multipart/mixed;multipart/alternative;text/plain;},RCVD_NO_TLS_LAST(0.10){},HAS_LIST_UNSUB(-0.01){},XM_UA_NO_VERSION(0.01){},DKIM_SIGNED(0.00){mm3.lavasoftware.org:s=dkim;},FORGED_RECIPIENTS_MAILLIST(0.00){},FORGED_SENDER_MAILLIST(0.00){},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){test at mm3.lavasoftware.org;test-bounces at mm3.lavasoftware.org;},HAS_REPLYTO(0.00){philip.colmer at codelinaro.org;},MIME_TRACE(0.00){0:+;1:+;2:+;3:~;4:+;},PREVIOUSLY_DELIVERED(0.00){test at mm3.lavasoftware.org;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){3;},REPLYTO_DOM_NEQ_FROM_DOM(0.00){},TAGGED_FROM(0.00){philip.colmer=linaro.org;},TO_DN_ALL(0.00){},TO_EQ_FROM(0.00){}]),
len: 5079, time: 236.610ms, dns req: 13, digest:
<dc5a7d4f5acc7e072e651fb61d0d43d5>, rcpts: <philip.colmer at linaro.org>,
mime_rcpts: <test at mm3.lavasoftware.org>
2021-09-20 07:10:25 #37321(rspamd_proxy) <558bb4>; proxy;
rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned,
4 regexps matched, 176 regexps total, 86 regexps cached, 0B scanned
using pcre, 2.01KiB scanned total
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_message_parse: loaded message; id:
<17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>;
queue-id: <ABFAFBEA8D>; size: 5079; checksum:
<dc5a7d4f5acc7e072e651fb61d0d43d5>
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_mime_part_detect_language: detected part language: en
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; lua;
greylist.lua:204: skip greylisting for local networks and/or
authorized users
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
dkim_symbol_callback: skip DKIM checks for local networks and
authorized users
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; lua; spf.lua:186:
skip SPF checks for local networks and authorized users
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; dkim;
rspamd_dkim_check: arc_sig: bh value mismatch: got
zJ40PoiQolFhFDNtGN6hEUNOJtDCnSu+T+9+9qkGBJ4=, expected
UafOni038olf8S2QOrAIdd1uG+CPy6lUXSacJpOh40o=; body length 1081->1079;
d=mm3.lavasoftware.org; s=dkim
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; lua; dmarc.lua:349:
skip DMARC checks as either SPF or DKIM were not checked
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; lua;
once_received.lua:99: Skipping once_received for authenticated user or
local network
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_stat_classifiers_process: skip statistics as SPAM class is
missing
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; lua;
greylist.lua:318: Score too low - skip greylisting
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_task_write_log: id:
<17c020a8f7a.adeaa2cf45941.5022929780341533192 at codelinaro.org>, qid:
<ABFAFBEA8D>, ip: 127.0.0.1, from:
<test-bounces at mm3.lavasoftware.org>, (default: F (no action):
[0.79/15.00] [ARC_REJECT(1.00){signature check failed: fail, {[1] =
sig:mm3.lavasoftware.org:reject};},MAILLIST(-0.20){mailman;},MIME_GOOD(-0.10){multipart/mixed;multipart/alternative;text/plain;},RCVD_NO_TLS_LAST(0.10){},HAS_LIST_UNSUB(-0.01){},XM_UA_NO_VERSION(0.01){},DKIM_SIGNED(0.00){mm3.lavasoftware.org:s=dkim;},FORGED_RECIPIENTS_MAILLIST(0.00){},FORGED_SENDER_MAILLIST(0.00){},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){test at mm3.lavasoftware.org;test-bounces at mm3.lavasoftware.org;},HAS_REPLYTO(0.00){philip.colmer at codelinaro.org;},MIME_TRACE(0.00){0:+;1:+;2:+;3:~;4:+;},PREVIOUSLY_DELIVERED(0.00){test at mm3.lavasoftware.org;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){3;},REPLYTO_DOM_NEQ_FROM_DOM(0.00){},TAGGED_FROM(0.00){philip.colmer=codelinaro.org;},TO_DN_ALL(0.00){},TO_EQ_FROM(0.00){}]),
len: 5079, time: 11.408ms, dns req: 12, digest:
<dc5a7d4f5acc7e072e651fb61d0d43d5>, rcpts:
<philip.colmer at codelinaro.org>, mime_rcpts:
<test at mm3.lavasoftware.org>
2021-09-20 07:10:25 #37321(rspamd_proxy) <f51081>; proxy;
rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned,
4 regexps matched, 176 regexps total, 86 regexps cached, 0B scanned
using pcre, 2.01KiB scanned total
2021-09-20 07:10:25 #37321(rspamd_proxy) <631f9b>; proxy;
proxy_milter_finish_handler: finished milter connection
2021-09-20 07:16:14 #37324(rspamd_proxy) <52c995>; proxy;
proxy_accept_socket: accepted milter connection from 127.0.0.1 port
39796
2021-09-20 07:16:14 #37324(rspamd_proxy) <52c995>; milter;
rspamd_milter_process_command: got connection from 35.179.93.71:47834
2021-09-20 07:16:14 #37324(rspamd_proxy) <52c995>; proxy;
proxy_milter_finish_handler: finished milter connection
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
proxy_accept_socket: accepted milter connection from 127.0.0.1 port
48300
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; milter;
rspamd_milter_process_command: got connection from 127.0.0.1:38432
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_message_parse: loaded message; id:
<163212298829.38042.11881199049009320543 at ip-172-31-2-177.ec2.internal>;
queue-id: <4B440BE547>; size: 816; checksum:
<cb2b529764ef7f1d154abc4b82e1623c>
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_mime_part_detect_language: detected part language: en
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; lua;
greylist.lua:204: skip greylisting for local networks and/or
authorized users
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
dkim_symbol_callback: skip DKIM checks for local networks and
authorized users
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; lua; spf.lua:186:
skip SPF checks for local networks and authorized users
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; lua; dmarc.lua:349:
skip DMARC checks as either SPF or DKIM were not checked
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; lua;
once_received.lua:99: Skipping once_received for authenticated user or
local network
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of
classifier bayes: not enough learns 0; 200 required
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_stat_classifiers_process: skip statistics as SPAM class is
missing
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; lua;
greylist.lua:318: Score too low - skip greylisting
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; lua;
neural.lua:315: skip ham sample to keep spam/ham balance; probability
1; 0 spam and 1 ham vectors stored
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_task_write_log: id:
<163212298829.38042.11881199049009320543 at ip-172-31-2-177.ec2.internal>,
qid: <4B440BE547>, ip: 127.0.0.1, from:
<postorius at mm3.lavasoftware.org>, (default: F (no action):
[-0.10/15.00] [MIME_GOOD(-0.10){text/plain;},ARC_NA(0.00){},DKIM_SIGNED(0.00){mm3.lavasoftware.org:s=dkim;},FROM_EQ_ENVFROM(0.00){},FROM_NO_DN(0.00){},MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]),
len: 816, time: 290.349ms, dns req: 15, digest:
<cb2b529764ef7f1d154abc4b82e1623c>, rcpts:
<philip.colmer at codelinaro.org>, mime_rcpts:
<philip.colmer at codelinaro.org>
2021-09-20 07:29:48 #37324(rspamd_proxy) <aedc64>; proxy;
rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned,
2 regexps matched, 176 regexps total, 47 regexps cached, 0B scanned
using pcre, 1.89KiB scanned total
2021-09-20 07:29:48 #37324(rspamd_proxy) <2f90dc>; proxy;
proxy_milter_finish_handler: finished milter connection
2021-09-20 07:36:16 #37323(rspamd_proxy) <06ee59>; proxy;
proxy_accept_socket: accepted milter connection from 127.0.0.1 port
52314
2021-09-20 07:36:16 #37323(rspamd_proxy) <06ee59>; milter;
rspamd_milter_process_command: got connection from
18.170.226.166:21345
2021-09-20 07:36:16 #37323(rspamd_proxy) <06ee59>; proxy;
proxy_milter_finish_handler: finished milter connection

I realise there is a lot to digest there but does anyone have any
suggestions on what I've misconfigured, please?

Thanks.

Regards

Philip


More information about the Users mailing list