Question about SPAM emails

Discussion in 'General' started by onastvar, May 29, 2020.

  1. onastvar

    onastvar Member

    I use POSTFIX & RSPAMD, some of the valid email messages get flagged as ***SPAM***. How can I tell POSTFIX & RSPAMD not to flag these message as SPAM. My webmail is latest Roundcube. Here's one example of the message headers of email that i don't want marked as SPAM.

    Return-Path: <[email protected]>
    Delivered-To: [email protected]
    Received: from ( [])
    by (Postfix) with ESMTPS id 5402C47CE0
    for <[email protected]>; Thu, 28 May 2020 17:51:11 -0500 (CDT)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;;
    h=content-type:from:mime-version:to:subject; s=s1;
    bh=Od1zwvO67ixwmGMhci7ALtdy9yZnIdXcikuUxEsUquo=; b=GdU2eqNkZWnLF
    Received: by with SMTP id filter0877p1iad2-915-5ED0405E-2E
    2020-05-28 22:51:10.932437266 +0000 UTC m=+1121505.135023375
    Received: from MzE5MDIyNA (unknown)
    by (SG) with HTTP id 4WqgNADeT42U_z1EJi3pRg
    Thu, 28 May 2020 22:51:10.857 +0000 (UTC)
    Content-Type: multipart/alternative; boundary=950f0f43f5475b5bc3d07144721cd133a7f7415a6dee125b26e80f03f719
    Date: Thu, 28 May 2020 22:51:10 +0000 (UTC)
    From: "Alignable" <[email protected]>
    Mime-Version: 1.0
    To: [email protected]
    Message-ID: <[email protected]>
    Subject: *** SPAM *** The Juice Plus+ Company/The Tower Garden liked a new Ideal Customer Update
    X-SG-EID: tPZdr8pQ6rsnyCvuffn0IIXDOBTewUVVieyR+wEWb4Wio3gN8E+6kfOMbff4opoz4WmM+tnpeNQNMv
    X-SG-ID: Blx39jsbCavSoIa7t0ZAp/xIUzlYejObmQgS8d2KcFsZZZIT2d4ozG1lWSXTgO1CrUc+8DSdffWHdL
    X-Spamd-Bar: ++++++++
    X-Spam-Level: ********
    dkim=pass header.s=s1 header.b=GdU2eqNk;
    spf=pass ( domain of [email protected] designates as permitted sender) [email protected]
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    That has no relevance for spam tagging.
    What is common with the messages you do not want tagged as SPAM? With just one example it is hard to know.
    If all the messages have same sender, you could add that sender to spamfilter whitelist, in ISPConfig panel Email tab.
    Otherwise you could for that [email protected] mailbox adjust Spamfilter Policy for RSPAMD. Make it not add ***SPAM*** in the subject at all, or increase the score needed to add the tag.
  3. Steini86

    Steini86 Active Member

    I don't understand. Do you want to tell rspamd, that this mail was no spam? Or do you want rspamd to not change the Subject of spam mails?
    For the first, you have several options:
    - You can add the sender to the whitelist in ispconfig
    - You can reconfigure rspamd in the web interface (see
    a) by changing the severity of individual tests
    b) learning the filter that this mail is no spam

    For the second, go in ISPC interface to Mail -> Spamfilter -> Policy -> RSpamd -> SPAM tag method
  4. onastvar

    onastvar Member

    For example, I have valid emails (not spam) from my insurance company, and my email server is marking the subject of email with *** SPAM *** and moving messages to JUNK folder. I have added insurance email address to whitelist and emails are still marked as SPAM and moved to JUNK folder, here is another example of email header:

    Return-Path: <[email protected].com>
    Delivered-To: [email protected]
    Received: from ( [])
    by (Postfix) with ESMTPS id 4FE5147D3E
    for <[email protected]>; Wed, 3 Jun 2020 11:18:47 -0500 (CDT)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=200608;;
    Reply-To:Message-ID:Content-Type; [email protected];
    Received: by id hqv6me2fmd4o for <[email protected]>; Wed, 3 Jun 2020 16:03:38 +0000 (envelope-from <[email protected].com>)
    From: "Progressive" <[email protected]>
    To: <[email protected]>
    Subject: *** SPAM *** Welcome to Progressive
    Date: Wed, 03 Jun 2020 10:03:25 -0600
    List-Unsubscribe: <mailto:leave-fd4c1074720b5c392848-fe36[email protected]>
    MIME-Version: 1.0
    List-ID: <7000168.xt.local>
    X-CSA-Complaints: [email protected]
    X-SFMC-Stack: 6
    x-job: 7000841_437439
    Reply-To: "Progressive" <[email protected]>
    Message-ID: <[email protected]>
    Content-Type: multipart/alternative;
    X-Spamd-Bar: +++++++
    X-Spam-Level: *******
    dkim=pass header.s=200608 header.b=QYuN6Kct;
    dmarc=pass (policy=reject);
    spf=pass ( domain of [email protected].com designates as permitted sender) [email protected]
  5. onastvar

    onastvar Member

    Whitelist option doesn't seem to work in my case. I added sender's email to Whitelist in ISPConfig (Email > Whitelist > Add Whitelist record) and email message from that sender was moved to JUNK folder with *** SPAM *** in the title.
  6. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    My experience is the Spamfilter whitelist in ISPConfig Panel does not work with RSpamd.
    Try using Postfix Whitelist, that works.
  7. onastvar

    onastvar Member

    Thanks @Taleman! I made change you recommended. Awaiting to see if message will end up in Inbox or Junk.
  8. onastvar

    onastvar Member

    Thanks @Taleman. Confirmed, added email to Postfix Whitelist which worked, I received message in Inbox..
  9. onastvar

    onastvar Member

    I just noticed, some of the emails I have added to "Postfix Whitelist" still end up labeled as SPAM and moved to JUNK folder. When I look at message receipt, I can see some of these companies are using mailgun and/or sendgrid and similar to message customers & clients. So the "From email address" is not actual email address account that's sending emails.

    What is the recommendation to handle situations like these?
    Thanks in advance.
  10. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Tweak your score rules and see why they get flagged as spam in the headers of the mail. This is better practice imo.

    You probably whitelisted one address/server but they are sending from a different address/server through sendgrid - just a guess.
    onastvar likes this.
  11. onastvar

    onastvar Member

    Thanks @Th0m!
    Here is my Rspamd Spamfilter "Normal" policy :

    Greylisting level: 4.00
    SPAM Tag method: 6.00
    SPAM tag method: Subject (adds "***SPAM***" at the beginning)
    SPAM reject level: 10.00

    How to determine scores rules from the headers of the mail?
  12. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    onastvar likes this.

Share This Page