[Rspamd-Users] No greylisting with score 5.70 ?

[Lucas Rolff]

Have you checked whether `rothgmbhkf at bn-yx.com<mailto:rothgmbhkf at bn-yx.com>` attempted to send an email in the past 24 hours prior to that email to the recipient? Since graylisting (by default) will only happen once for `from : to : ip` (/19 for v4, /64 for v6) in a 24 hour period.

On 7 Mar 2024, at 10:50, Tino Hendricks via Users <users at lists.rspamd.com> wrote:

Dear list,

it seems I’m still having a little understanding difficulty.

My configdump says, greylist score is 4:

actions {
   greylist = 4;
   add_header = 6;
   reject = 15;
}


Shouldn’t this mail then be greylisted?

2024-03-07 09:50:42 #1190659(normal) <dc6c73>; task; rspamd_task_write_log: id: <300f7a2d3629f4ac01902b53846ee69a at bn-yx.com>, qid: <2859C472D5B>, ip: 64.188.4.213, from: <rothgmbhkf at bn-yx.com>, (default: F (no action): [5.69/15.00] [BAYES_SPAM(5.09){99.99%;},FORGED_SENDER(0.30){rothgmbhse at bn-yx.com;rothgmbhkf at bn-yx.com;},MIME_HTML_ONLY(0.20){},BAD_REP_POLICIES(0.10){},ARC_NA(0.00){},ASN(0.00){asn:8100, ipnet:64.188.0.0/20, country:US;},DKIM_TRACE(0.00){bn-yx.com:+;},DMARC_POLICY_ALLOW(0.00){bn-yx.com;none;},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){rothgmbhse at bn-yx.com;rothgmbhkf at bn-yx.com;},GREYLIST(0.00){pass;body;},HAS_REPLYTO(0.00){rothgmbh at bn-yx.com;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:~;},NEURAL_SPAM(0.00){0.548;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_DOM_EQ_FROM_DOM(0.00){},RWL_MAILSPIKE_POSSIBLE(0.00){64.188.4.213:from;},R_DKIM_ALLOW(0.00){bn-yx.com:s=mail;},R_SPF_ALLOW(0.00){+ip4:64.188.4.213:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 6755, time: 76.995ms, dns req: 22, digest: <de411862bd4aec0f38b62dab2e42218b>, rcpts: <t.hendricks at interpool.de>, mime_rcpts: <t.hendricks at interpool.de>
2024-03-07 09:50:42 #1190659(normal) <dc6c73>; task; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 4 regexps matched, 174 regexps total, 44 regexps cached, 0B scanned using pcre, 12.75KiB scanned total

Thanks for clarification!

Tino
--
Users mailing list
Users at lists.rspamd.com
https://lists.rspamd.com/mailman/listinfo/users