mendozal Blah... I'm at a loss.
https://ibb.co/XYnpLMT
If I run rspamc from the mail server itself to evaluate the mail file and see what rules it evaluated, the spam score is lower than the spam score from the Mailbaby relay log.
root@tt-mail:/var/local/enhance/email/mailboxes/391cff31-7bdc-4f6c-a59c-f18be088ca78/president@example2.org/mail/.Spam/cur# rspamc -h localhost < '1728078026.M911793P806997.tt-mail,S=4221,W=4305:2,S'
Results for file: stdin (0.656 seconds)
[Metric: default]
Action: add header
Spam: true
Score: 4.20 / 8.00
Symbol: ARC_ALLOW (-1.00)[mailbaby.net:s=detka:i=1]
Symbol: DMARC_NA (0.00)[example2.org]
Symbol: FROM_EQ_ENVFROM (0.00)
Symbol: FROM_HAS_DN (0.00)
Symbol: HAS_PHPMAILER_SIG (0.00)
Symbol: HAS_REPLYTO (0.00)[brad@example.com]
Symbol: MID_RHS_MATCH_FROM (0.00)
Symbol: MIME_HTML_ONLY (0.20)
Symbol: MIME_TRACE (0.00)[0:~]
Symbol: PREVIOUSLY_DELIVERED (0.00)[president@example2.org]
Symbol: RCPT_COUNT_ONE (0.00)[1]
Symbol: RCVD_COUNT_THREE (0.00)[3]
Symbol: RCVD_IN_DNSWL_LOW (-0.10)[64.20.38.26:received]
Symbol: RCVD_NO_TLS_LAST (0.10)
Symbol: RCVD_VIA_SMTP_AUTH (0.00)
Symbol: REPLYTO_DOM_NEQ_FROM_DOM (0.00)
Symbol: R_DKIM_NA (0.00)
Symbol: SPAM_FLAG (5.00)
Symbol: TO_DN_NONE (0.00)
Symbol: TO_DOM_EQ_FROM_DOM (0.00)
Message-ID: 4MEXB9zhgFGrri9kwBbUbuhSmGBUtAAe7aKojBK4@example2.org
Urls: []
Emails: ["brad@example.com"]
ChatGPT suggests the main reason is:
Why itโs Flagged as Spam:
SPAM_FLAG (5.00) is the main reason. This suggests that some internal filtering rule or past training labeled this type of email as suspicious.
Update: Mailbaby support confirmed itโs the SPAM Flag score of 5 that is the issue. This is being done before it reaches the relay via outbound spam filtering. Do you have your outbound spam filter disabled in Enhance?
I've run a recursive grep on /etc/rspamd on my mail server to try and understand the config of this check and cannot find any config files declaring the SPAM_FLAG rule. ๐
Edit: Ever after disabling outbound spam filtering -- no change. SPAM_FLAG still being set before reaching the relay.
I've put a ticket in with Enhance. @mendozal Thank you so much for the time you've spent assisting.