Skip to content

rspamd does not show rejected GTUBE mails in the history and spam "add header" is not delivered to junk #3570

@MohammedNoureldin

Description

@MohammedNoureldin

📝 Preliminary Checks

  • I tried searching for an existing issue and followed the debugging docs advice, but still need assistance.

👀 What Happened?

I am not sure if this issue is specific to rspamd or to Docker mailserver.

When I try to send/receive spam message, in the statistics, I see an increasing in the rejected mails:

image

and I see that the mail was rejected in the log):

 23:47:30 mail postfix/smtps/smtpd[16193]: connect from unknown[52.97.X.197]
Oct  6 23:47:30 mail postfix/smtps/smtpd[16193]: Anonymous TLS connection established from unknown[52.97.X.197]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256
Oct  6 23:47:30 mail postfix/smtps/smtpd[16193]: 8C020CE: client=unknown[52.97.X.197], sasl_method=LOGIN, [email protected]
Oct  6 23:47:30 mail postfix/sender-cleanup/cleanup[16197]: 8C020CE: message-id=<AM0PR01MB547344B723EAB67EBA44DBA4A6C9A@AM0PR01MB5473.eurprd01.prod.exchangelabs.com>
Oct  6 23:47:30 mail postfix/sender-cleanup/cleanup[16197]: 8C020CE: replace: header MIME-Version: 1.0 from unknown[52.97.X.197]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<AM0PR01MB5473.eurprd01.prod.exchangelabs.com>: MIME-Version: 1.0
Oct  6 23:47:30 mail postfix/sender-cleanup/cleanup[16197]: 8C020CE: milter-reject: END-OF-MESSAGE from unknown[52.97.X.197]: 5.7.1 Gtube pattern; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<AM0PR01MB5473.eurprd01.prod.exchangelabs.com>
Oct  6 23:47:30 mail postfix/smtps/smtpd[16193]: disconnect from unknown[52.97.X.197] ehlo=1 auth=1 mail=1 rcpt=1 data=0/1 commands=4/5

However, in the history, I do not see the rejected messages, only the other types:

image

I am not sure here if I am missing something? Why do the rejected mails not appear in the history?

I have to mention that no spam is arriving the junk, they just get rejected, which is not what I expect after setting MOVE_SPAM_TO_JUNK=1. What is also wrong here?

👟 Reproduction Steps

Here are my env variables that may be relevant (I redacted those which are not relevant for simplicity):

  OVERRIDE_HOSTNAME: mail.DOMAIN
  LOG_LEVEL: debug # TODO use info when done of debugging.
  TZ: "Europe/Vienna"
  POSTFIX_MAILBOX_SIZE_LIMIT: "100000000" # In bytes (100 MB).
  POSTMASTER_ADDRESS: postmaster@DOMAIN
  ENABLE_MANAGESIEVE: "1"
  
  ### Spam and dangerous content ###
  ENABLE_RSPAMD: "1"
  # Rspamd replaces these services.
  ENABLE_OPENDKIM: "0"
  ENABLE_OPENDMARC: "0"
  ENABLE_POLICYD_SPF: "0"
  ENABLE_AMAVIS: "0"
  ENABLE_SPAMASSASSIN: "0"

  MOVE_SPAM_TO_JUNK: "1"

  ENABLE_CLAMAV: "0"

  ENABLE_POSTGREY: "0" # Rejects E-Mails from the triplet CLIENT_IP/SENDER/RECIPIENT if seen again in less than a specific time (5 min by default).
  ENABLE_FAIL2BAN: "0" # Analyses the log and recognizes the malicious behavior.

🐋 DMS Version

12.1.0

💻 Operating System and Architecture

Ubuntu 22.04

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions