[Rspamd-Users] weird MIME penalisation on (IMO) right formated mail attachments - RSPAMD or our mistake?

[Franta Hanzlík]

On Tue, 15 Apr 2025 13:00:55 +0100 (BST)
"G.W. Haywood" <rspamd at jubileegroup.co.uk> wrote:

> Hi there,
> 
> On Tue, 15 Apr 2025, Franta Hanzlík wrote:
> > On Mon, 14 Apr 2025 Franta Hanzlík wrote:
> >  
> >> At our high school we have now problem with internal mail delivery -
> >> ...
> >> ...  
> > ...
> > ...
> > Personally, as the best solution to my problem I would like an algorithm like:
> >
> > if (mail_from_mydomain && mail_to_mydomain) then ...
> > ...  
> 
> Are you filtering mail which your domain sends to itself because you do not trust the senders?
> 
> Can you not whitelist the mail which you do not wish rspamd to filter?
> 
> https://rspamd.com/doc/modules/whitelist.html
> -- 

Thank you. Yes, we are also filter outgoing mails - mainly because 
here we have quite frequent cases of abuse of user accounts (mainly 
students), leading to spamming from our mailserver.
RSPAMD is a good helper for early detection of account abuse, among 
other things.
And recently it even caught a mail from crackers SW Medusa, which sent 
stolen login information to some mail address in the world.

That's why I wouldn't want to whitelist all outgoing mail.
And I would probably be able to write some ?selector? map to whitelist 
emails from our domain to our domain - but if it were possible to make 
it more precise/refined to whitelist only specific types of attachments 
or to nullify the effect of penalizing some symbols (MIME_BAD_EXTENSION, 
MIME_BAD_ATTACHMENT, MIME_BASE64_TEXT, R_MIXED_CHARSET,...), that would 
be even better.
But my knowledge of RSPAMD is far from reaching these heights now... :(
I would be very happy if someone could advise me.
-- 
Thanks in advance, Franta Hanzlík