[Rspamd-Users] Bug or 'feature' ...?

[Michelle Sullivan]

Just had an interesting one come through, user complaining they were getting rejected email - a particular email from a lawyer…

Took the details and checked the logs… 

Score: 345345.02 / 15.00
Symbol: LOCAL_MAP_SUBJECT (345345.00)[FW: The<redacted for privacy>r. 070344****]

Took looked up in the maps … nothing matched .. that’s the multimap.conf block name..

Checked the score and came up with a hit..

hdr_subject.txt:/[0-9]{5,}\*{2,}$/i	345345STAR_SUB_KEY:12

Changing that to:

hdr_subject.txt:/[0-9]{5,}\*{2,}$/i	ES345345STAR_SUB_KEY:12

The message scores 12.

Intended, warned (I didn’t see any warnings) .. or bug?

Regards,

Michelle