[Rspamd-Users] Need some help with forced greylisting

[Brian J. France]

Hello,

  Thanks for the idea, but it didn't seem to help.

I deleted all rg\* keys from the redis table and tried again, mail went through on the first attempt still.

Is there another cache I need to delete or do I need to restart rspamd after nuking the redis?

Thanks,

Brian
 

> On Sep 21, 2022, at 8:45 AM, Christian Mack <christian.mack at uni-konstanz.de> wrote:
> 
> Hello
> 
> Did an email from that sender already get greylisted before?
> Then the next one will not be held back again.
> That is greylisting semantics.
> 
> 
> Kind regards,
> Christian Mack
> 
> Am 20.09.22 um 15:38 schrieb Brian J. France:
>> Hello,
>> 
>>  I am trying to setup forced greylist maps, but running into issues.  In local.d/multimap.conf I add the following:
>> 
>> 
>> FORCE_GREYLISTING_DOMAIN {
>>    type = "rcpt";
>>    filter = "email:domain:tld";
>>    prefilter = true;
>>    map = "/etc/rspamd/local.d/greylist.domain.map";
>>    action = "greylist"
>>    message = "Try again later"
>> }
>> 
>> FORCE_GREYLISTING_EMAIL {
>>    type = "rcpt";
>>    filter = "email:addr";
>>    prefilter = true;
>>    map = "/etc/rspamd/local.d/greylist.email.map";
>>    action = "greylist"
>>    message = "Try again later"
>> }
>> 
>> A message that matched is delivered on the first attempt instead of being delayed for the greylist timeout period.  The message has the following headers added:
>> 
>> 
>> X-Spamd-Result: default: False [0.00 / 20.00];
>> 	FORCE_GREYLISTING_EMAIL(0.00)[user at domain.tld];
>> 	ASN(0.00)[asn:36646, ipnet:66.163.184.0/21, country:US]
>> X-Rspamd-Pre-Result: action=greylist;
>> 	module=multimap;
>> 	Try again later
>> 
>> 
>> If I change action to "soft reject", it just continuously rejects and never allows delivery.
>> 
>> If I add a score variable with a value above the greylist value, the messages is still delivered on the first attempt and not delayed.
>> 
>> If I comment out the pre filter variable, the messages is still delivered on the first attempt and not delayed.
>> 
>> 
>> What am I missing?
>> 
>> Thanks,
>> 
>> Brian
>> 
> 
> 
> -- 
> Christian Mack
> Universität Konstanz
> Kommunikations-, Informations-, Medienzentrum (KIM)
> Abteilung IT-Dienste Forschung, Lehre, Infrastruktur
> 78457 Konstanz
> +49 7531 88-4416
> -- 
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users