[Rspamd-Users] weird MIME penalisation on (IMO) right formated mail attachments - RSPAMD or our mistake?

[Florian Piekert]

Hello,

just whitelist the recipient account of the scholar's homework.

#
# local.d/settings.conf
#
want_spam {
       id = "want_spam";
       want_spam = yes;
       priority = high;
       rcpt = "homework_receiver at myschool.org";
}


Am 15.04.2025 um 15:53 schrieb Franta Hanzlík via Users:
> On Tue, 15 Apr 2025 13:00:55 +0100 (BST)
> "G.W. Haywood" <rspamd at jubileegroup.co.uk> wrote:
> 
>> Hi there,
>>
>> On Tue, 15 Apr 2025, Franta Hanzlík wrote:
>>> On Mon, 14 Apr 2025 Franta Hanzlík wrote:
>>>   
>>>> At our high school we have now problem with internal mail delivery -
>>>> ...
>>>> ...
>>> ...
>>> ...
>>> Personally, as the best solution to my problem I would like an algorithm like:
>>>
>>> if (mail_from_mydomain && mail_to_mydomain) then ...
>>> ...
>>
>> Are you filtering mail which your domain sends to itself because you do not trust the senders?
>>
>> Can you not whitelist the mail which you do not wish rspamd to filter?
>>
>> https://rspamd.com/doc/modules/whitelist.html
>> -- 
> 
> Thank you. Yes, we are also filter outgoing mails - mainly because
> here we have quite frequent cases of abuse of user accounts (mainly
> students), leading to spamming from our mailserver.
> RSPAMD is a good helper for early detection of account abuse, among
> other things.
> And recently it even caught a mail from crackers SW Medusa, which sent
> stolen login information to some mail address in the world.
> 
> That's why I wouldn't want to whitelist all outgoing mail.
> And I would probably be able to write some ?selector? map to whitelist
> emails from our domain to our domain - but if it were possible to make
> it more precise/refined to whitelist only specific types of attachments
> or to nullify the effect of penalizing some symbols (MIME_BAD_EXTENSION,
> MIME_BAD_ATTACHMENT, MIME_BASE64_TEXT, R_MIXED_CHARSET,...), that would
> be even better.
> But my knowledge of RSPAMD is far from reaching these heights now... :(
> I would be very happy if someone could advise me.