[Rspamd-Users] rspamd DKIM, Mimecast and Content-Encoding

[Gerald Galster]

>> For years I never had any deliverability issue, rspamd is just rock solid for me, so I wonder whether I miss something here... anyone has any advice where to start looking for?
> 
> X-Spam-Status	Yes, score=6.37 tagged_above=-999 required=5 tests=[AUTHRES_DKIM_FAIL=0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.17, KAM_DMARC_STATUS=3, MAILING_LIST_MULTI=-0.1, RELAYCOUNTRY_BAD_DE=0.5, RELAYCOUNTRY_GOOD=-0.5, SPF_HELO_NONE=3, SPF_PASS=-0.1] autolearn=no autolearn_force=no
> ARC-Authentication-Results	i=1; mail.rspamd.net; dkim=fail ("body hash did not verify") header.d=effenberger.org header.s=202410 header.b=MXy1XUNL
> Authentication-Results	mx.junc.eu (amavisd-new); dkim=pass (1024-bit key) header.d=lists.rspamd.com header.b="b1+0y5Hs"; dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=effenberger.org header.b="MXy1XUNL"
> Authentication-Results	mail.rspamd.net; dkim=fail ("body hash did not verify") header.d=effenberger.org header.s=202410 header.b=MXy1XUNL
> 
> why is sys4.de have spf helo none ?

... proto=ESMTP helo=<mail.rspamd.net>

I don't see sys4 in headers (this is not the postfix mailinglist).

> SPF_HELO_NONE=3

https://datatracker.ietf.org/doc/html/rfc7208#section-2.3

Checking HELO is recommended, it's not a must. 

Maybe that's why the default score for that rule is zero:

https://svn.apache.org/repos/asf/spamassassin/tags/spamassassin_current_release_4.0.x/rules/50_scores.cf
score SPF_HELO_NONE 0.001

Did you modify the score from 0 (default) to 3 in your setup?


> why is sys4 using rspamd BEFORE openARC is validated, its currently AFTER dkim is breaked  :(
> 
> yes i know rspamd can do the task with ARC, but imho the mail flow is incorrect, if mailman3 is doing its job before rspamd, it breaks

https://github.com/rspamd/rspamd/issues/5173

Rspamd 3.10.2 has been released to fix the arc problem.

Best regards,
Gerald