On 18.02.2022 16:26, Alexander Hall wrote:
On February 18, 2022 3:44:08 PM GMT+01:00, Stuart Henderson
<[email protected]> wrote:
On 2022/02/18 15:26, Mark Patruck wrote:
On 18.02.2022 10:11, Alexander Hall wrote:
> Hi!
>
> Lately I've seen ports@ email in my spam folder, if they contain "bad.port.mk", since
apparently "port.mk" is considered a domain name, and a harmful such, too.
>
> I've tried to whitelist "bad.port.mk" but it does not seem to help.
>
> I'm assuming this might be a common issue for other ports@ subscribers, so if
anyone has any suggested remedy, is be happy to hear it.
>
> /Alexander
No issues here with ports@ mails. I've also checked the symbol table
for scanned mails (rspamc analyse), but didn't find a bigger increase
of the final score due to potential spam.
Out of interest...what does your scan results say for relevant mails?
It hit gonzalo's nextcloud updates the other day. Relevant bit on mine
was URIBL_BLACK(7.50)[port.mk:url];
Yup, exactly that.
While seemingly self-healed now, it would be nice to know how to avoid or
workaround this in the future.
As i wouldn't weaken the overall scanning/analysis via external
blacklists and other clever technics by disabling options, the
use of multimaps come in handy.
For mails from OpenBSD's mx, you could decrease the final score
by f.e. 3.0
----- /etc/rspamd/local.d/multimap.conf
IP_VIP {
type = "ip";
prefilter = true;
map = "/${LOCAL_CONFDIR}/local.d/ip_vip.map";
description = "Slightly decrease score for VIPs";
score = -3.0;
}
-----
----- /etc/rspamd/local.d/ip_vip.map
199.185.178.25
-----
This way, all metrics are untouched and active, so unless you don't
receive obvious spam, the score should be low enough to prevent the
classification as spam.
Of course there are lots of other mechanisms for this case (though
most of the time you don't need to touch stuff at all), so you have
to try and see what fits best.
-Mark
/Alexander
--
Mark Patruck ( mark at wrapped.cx )
GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51
https://www.wrapped.cx
