[Rspamd-Users] I'm confused...

[Gerald Galster]

>   - *mail.example.com <http://mail.example.com>* (where postfix runs)
>   - *rspamd.example.com <http://rspamd.example.com>* (where rspamd/redis
>   runs)
> 
> Each of these are FreeBSD 14.0p4.  Each has three IP addresses -- 2 public
> addresses (IPv4, IPv6) and a private (unroutable, IPv4) one.
> 
> FreeBSD generates daily/weekly/monthly reports about the results of routine
> system checks and mails them to root (so-called *periodic* reports).

As you wrote in another mail you're sending those reports using (/usr/bin/mail),
so mails are picked up locally by postix and are not injected via smtp.

Mails received via smtp/non-smtp are handled differently inside postfix, see
https://www.postfix.org/postconf.5.html#non_smtpd_milters
https://www.postfix.org/MILTER_README.html#non-smtp-milters

Is non_smtpd_milters in main.cf set accordingly?

Rspamd signs mails that are authenticated, e.g. via milter/sasl or by ip.
You say that mails from rspamd.example.com are signed, so they are probably
of local origin from rspamd's view (sign_local = true).

Mail.example.com's log contains: ipnet:2001:19f0:8000::/38 - this seems
to be delivered via ipv6. Why is that? Shouldn't it be handed over to
rspamd via your private ipv4? In that case it might qualify for sign_local.

Otherwise there is sign_networks:
# Map file of IP addresses/subnets to consider for signing
# sign_networks = "/some/file"; # or url

Best regards,
Gerald


>> # If false, messages from authenticated users are not selected for signing
>> sign_authenticated = true;
>> 
>> # If false, messages from local networks are not selected for signing
>> sign_local = true;