Profiks1
Newbie | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Здравствуйте, коллеги!
Подскажите, куда копать. Проблема следующая:
Приходит письмо с пометкой в теме письма - Subject: [***SPAM*** Score/Req: 10.00/5.0]
Но SpamAssassin не ставит в заголовке письма - X-Spam-Status: Yes , так как его рейтинг ниже 5.0.
Вот полный заголовок письма:
Код: Authentication-Results: mail.MY-DOMAIN.ru;
spf=pass smtp.mailfrom=doc@DOMAIN.ru;
dkim=pass (good signature) header.d=DOMAIN.ru header.b=bV7p5sZPBX;
dmarc=pass header.from=DOMAIN.ru (p=reject sampling=30 pct=30);
iprev=pass policy.iprev=111.111.111.1 (PTR DOMAIN.ru);
iprev=pass policy.iprev=111.111.111.1 (HELO mail.DOMAIN.ru);
iprev=pass policy.iprev=111.111.111.1 (MAIL doc@DOMAIN.ru)
Received-SPF: pass (mail.MY-DOMAIN.ru: domain DOMAIN.ru
designates 111.111.111.1 as permitted sender)
receiver=mail.MY-DOMAIN.ru; client-ip=111.111.111.1;
mechanism=a; envelope-from="doc@DOMAIN.ru";
helo=mail.DOMAIN.ru;
Received: from mail.DOMAIN.ru (DOMAIN.ru [111.111.111.1]) by mail.MY-DOMAIN.ru (80.89.10.198)
with ESMTPS id pd5001000020118.msg; Thu, 05 Dec 2024 02:08:34 +1000
X-Spam-Processed: mail.MY-DOMAIN.ru, Thu, 05 Dec 2024 02:08:34 +1000
(not processed: spam filter already applied to initial list submission)
X-MDOP-RefID: str=0001.0A682F23.67507F06.0014,ss=3,re=0.000,recu=0.000,cl=3,cld=1,fgs=0 (_st=3 _vt=0 _iwf=0)
X-MDSPF-Result: unapproved (mail.MY-DOMAIN.ru)
X-MDDNSBL-Result: mail.MY-DOMAIN.ru, Thu, 05 Dec 2024 02:08:34 +1000
bl.spamcop.net returned result of 127.0.0.2
dnsbl-1.uceprotect.net returned result of 127.0.0.2
X-MDRemoteIP: 111.111.111.1
X-MDHelo: mail.DOMAIN.ru
X-MDArrival-Date: Thu, 05 Dec 2024 02:08:34 +1000
X-Rcpt-To: salesvvo@MY-DOMAIN.ru
X-MDRcpt-To: salesvvo@MY-DOMAIN.ru
X-Envelope-From: doc@DOMAIN.ru
X-MDaemon-Deliver-To: admin@MY-DOMAIN.ru
X-MDDontArchive: true
X-MDMailing-List: salesvvo@MY-DOMAIN.ru
Precedence: bulk
List-Unsubscribe: <mailto:salesvvo-Unsubscribe@MY-DOMAIN.ru>
Sender: salesvvo@MY-DOMAIN.ru
X-MDAV-Result: clean
X-MDAV-Processed: mail.MY-DOMAIN.ru, Thu, 05 Dec 2024 02:08:33 +1000
X-Spam-Level: ****
X-Spam-Status: No, score=4.5 required=5.0 tests=FREEMAIL_FORGED_REPLYTO,
HTML_MESSAGE,NO_RECEIVED,NO_RELAYS,URIBL_ABUSE_SURBL shortcircuit=no
autolearn=no autolearn_force=no version=4.0.0
X-Spam-Report:
* -0.0 NO_RECEIVED Informational: message has no Received headers
* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
* 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
* blocklist
* [URI: salatof.ru]
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14)
Message-ID: <MDAEMON-F202412050208.AA0822376md5001000002964@mail.MY-DOMAIN.ru>
Reply-To: =?utf-8?B?0JLQtdGA0LAg0JzQuNC70L7RgdC10YDQtNC40Y8=?= <11111@rambler.ru>
From: "=?utf-8?B?0JLQtdGA0LAg0JzQuNC70L7RgdC10YDQtNC40Y8=?= via salesvvo" <salesvvo@MY-DOMAIN.ru>
To: salesvvo@MY-DOMAIN.ru
Subject: [***SPAM*** Score/Req: 10.00/5.0] =?utf-8?B?0J/QvtC00LDRgNC40YLQtSDQtNC10YLRj9C8INGH0YPQtNC+INCyINCd?=
=?utf-8?B?0L7QstC+0LPQvtC00L3RjtGOINC90L7Rh9GMLg==?=
Date: Wed, 4 Dec 2024 19:10:39 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="220b42cbc70e24298a206903f73216feeab2"
List-ID: <salesvvo.MY-DOMAIN.ru>
List-Post: <mailto:salesvvo@MY-DOMAIN.ru> |
Конфигурация SpamAssasin (Local.cf):
Код: required_score 5.0
rewrite_header subject [***SPAM*** Score/Req: _SCORE(0)_/_REQD_]
report_safe 0
skip_rbl_checks 0
add_header all Report _REPORT_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_)
lock_method win32
use_bayes 1
bayes_path E:\MDaemon\SpamAssassin\bayes\bayes
bayes_auto_learn 1
bayes_auto_learn_threshold_nonspam 0.1
bayes_auto_learn_threshold_spam 12.0
bayes_auto_expire 1
bayes_expiry_max_db_size 150000
bayes_min_ham_num 200
bayes_min_spam_num 200
#use_auto_welcomelist 0
#auto_welcomelist_path $AUTOWELCOMELISTPATH$E:\MDaemon\SpamAssassin\auto_welcomelist\auto_whitelist
normalize_charset 1
score MDAEMON_DKIM_PASS -0.5
score MDAEMON_VBR_CERT -3.0
auto_welcomelist_path E:\MDaemon\SpamAssassin\auto_welcomelist\auto_welcomelist
auto_welcomelist_factor 0.5
auto_welcomelist_file_mode 0666
score USER_IN_WELCOMELIST -100.0
score USER_IN_WELCOMELIST_TO -100.0
score USER_IN_BLOCKLIST 100.0
dns_available yes
score MDAEMON_SPF_FAIL 15.0
score MDAEMON_SPF_PASS -0.5
|
В фильтрах спама -> Списки DNS-BL , прописаны хосты - Ссылка
Лог SMTP-IN:
Код: Thu 2024-12-05 02:07:59.250: 01: ----------
Thu 2024-12-05 02:08:19.154: 05: Session 00178293; child 0001
Thu 2024-12-05 02:08:19.154: 05: Accepting SMTP connection from 176.53.146.73:45827 to 80.89.10.198:25
Thu 2024-12-05 02:08:19.156: 03: --> 220 mail.MY-DOMAIN ESMTP Thu, 05 Dec 2024 02:08:19 +1000
Thu 2024-12-05 02:08:19.296: 02: <-- EHLO mail.mosimag.ru
Thu 2024-12-05 02:08:19.297: 03: --> 250-mail.MY-DOMAIN Hello mail.mosimag.ru [176.53.146.73], pleased to meet you
Thu 2024-12-05 02:08:19.297: 03: --> 250-ETRN
Thu 2024-12-05 02:08:19.297: 03: --> 250-AUTH LOGIN PLAIN
Thu 2024-12-05 02:08:19.297: 03: --> 250-8BITMIME
Thu 2024-12-05 02:08:19.297: 03: --> 250-ENHANCEDSTATUSCODES
Thu 2024-12-05 02:08:19.297: 03: --> 250-PIPELINING
Thu 2024-12-05 02:08:19.297: 03: --> 250-CHUNKING
Thu 2024-12-05 02:08:19.297: 03: --> 250-STARTTLS
Thu 2024-12-05 02:08:19.297: 03: --> 250 SIZE
Thu 2024-12-05 02:08:19.417: 02: <-- STARTTLS
Thu 2024-12-05 02:08:19.417: 03: --> 220 2.7.0 Ready to start TLS
Thu 2024-12-05 02:08:19.715: 01: Обмен данными SSL выполнен успешно (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Thu 2024-12-05 02:08:19.843: 02: <-- EHLO mail.mosimag.ru
Thu 2024-12-05 02:08:19.843: 03: --> 250-mail.MY-DOMAIN Hello mail.mosimag.ru [176.53.146.73], pleased to meet you
Thu 2024-12-05 02:08:19.843: 03: --> 250-ETRN
Thu 2024-12-05 02:08:19.843: 03: --> 250-AUTH LOGIN PLAIN
Thu 2024-12-05 02:08:19.843: 03: --> 250-8BITMIME
Thu 2024-12-05 02:08:19.843: 03: --> 250-ENHANCEDSTATUSCODES
Thu 2024-12-05 02:08:19.843: 03: --> 250-PIPELINING
Thu 2024-12-05 02:08:19.843: 03: --> 250-CHUNKING
Thu 2024-12-05 02:08:19.843: 03: --> 250-REQUIRETLS
Thu 2024-12-05 02:08:19.843: 03: --> 250 SIZE
Thu 2024-12-05 02:08:19.965: 02: <-- MAIL FROM:<doc@mosimag.ru>
Thu 2024-12-05 02:08:19.965: 05: Performing PTR lookup (73.146.53.176.IN-ADDR.ARPA)
Thu 2024-12-05 02:08:20.083: 05: * D=73.146.53.176.IN-ADDR.ARPA TTL=(82) PTR=[mosimag.ru]
Thu 2024-12-05 02:08:20.212: 05: * D=mosimag.ru TTL=(421) A=[176.53.146.73]
Thu 2024-12-05 02:08:20.212: 05: ---- End PTR results
Thu 2024-12-05 02:08:20.212: 05: Performing IP lookup (mail.mosimag.ru)
Thu 2024-12-05 02:08:20.338: 05: * D=mail.mosimag.ru TTL=(405) A=[176.53.146.73]
Thu 2024-12-05 02:08:20.338: 05: ---- End IP lookup results
Thu 2024-12-05 02:08:20.338: 05: Performing IP lookup (mosimag.ru)
Thu 2024-12-05 02:08:20.457: 05: * D=mosimag.ru TTL=(625) A=[176.53.146.73]
Thu 2024-12-05 02:08:20.457: 05: ---- End IP lookup results
Thu 2024-12-05 02:08:20.457: 09: Performing SPF lookup (mail.mosimag.ru / 176.53.146.73)
Thu 2024-12-05 02:08:20.820: 09: * Result: none; no SPF record in DNS
Thu 2024-12-05 02:08:20.820: 09: ---- End SPF results
Thu 2024-12-05 02:08:20.820: 09: Performing SPF lookup (mosimag.ru / 176.53.146.73)
Thu 2024-12-05 02:08:20.947: 09: * Policy: v=spf1 a mx ip4:176.53.146.73 ~all
Thu 2024-12-05 02:08:21.072: 09: * Evaluating a: match
Thu 2024-12-05 02:08:21.072: 09: * Result: pass
Thu 2024-12-05 02:08:21.072: 09: ---- End SPF results
Thu 2024-12-05 02:08:21.072: 03: --> 250 2.1.0 Sender OK
Thu 2024-12-05 02:08:21.255: 02: <-- RCPT TO:<salesvvo@MY-DOMAIN>
Thu 2024-12-05 02:08:21.285: 05: Производится поиск DNS-BL (176.53.146.73 – соединение с IP)
Thu 2024-12-05 02:08:21.442: 05: * b.barracudacentral.org - прошло
Thu 2024-12-05 02:08:21.689: 05: * bl.spamcop.net - не удалось - 127.0.0.2
Thu 2024-12-05 02:08:21.808: 05: * dnsbl.sorbs.net - прошло
Thu 2024-12-05 02:08:22.088: 05: * dnsbl-1.uceprotect.net - не удалось - 127.0.0.2
Thu 2024-12-05 02:08:22.235: 05: * db.wpbl.info - прошло
Thu 2024-12-05 02:08:22.235: 05: ---- Конечные результаты DNS-BL
Thu 2024-12-05 02:08:22.241: 03: --> 250 2.1.5 Recipient OK
Thu 2024-12-05 02:08:22.374: 02: <-- DATA
Thu 2024-12-05 02:08:22.376: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2024-12-05 02:08:22.615: 01: Message size: 24042 bytes
Thu 2024-12-05 02:08:22.618: 10: Performing DKIM verification
Thu 2024-12-05 02:08:22.618: 10: * File: e:\mdaemon\queues\temp\md5001000002964.tmp
Thu 2024-12-05 02:08:22.618: 10: * Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:22.745: 10: * DKIM-Signature 1: v=1; c=relaxed/relaxed; a=rsa-sha256; s=mail; d=mosimag.ru; t=1733328639; <some tags are not logged>
Thu 2024-12-05 02:08:22.745: 10: * Verification result: good signature
Thu 2024-12-05 02:08:22.745: 10: * Result: pass
Thu 2024-12-05 02:08:22.746: 10: ---- End DKIM results
Thu 2024-12-05 02:08:22.756: 19: Выполняется обработка DMARC
Thu 2024-12-05 02:08:22.756: 19: * Файл: e:\mdaemon\queues\temp\md5001000002964.tmp
Thu 2024-12-05 02:08:22.756: 19: * Код сообщения: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:22.756: 19: * Домен автора: mosimag.ru
Thu 2024-12-05 02:08:22.756: 19: * Домен организации: mosimag.ru
Thu 2024-12-05 02:08:22.756: 19: * Запрашиваемый домен: _dmarc.mosimag.ru
Thu 2024-12-05 02:08:22.877: 19: * Запись политики: v=DMARC1; p=reject; sp=none; pct=30; aspf=r; fo=1; adkim=r; rua=mailto:info@mosimag.ru; ruf=mailto:info@mosimag.ru
Thu 2024-12-05 02:08:22.896: 19: * Проверка механизмов проверки подлинности на согласованность с DMARC
Thu 2024-12-05 02:08:22.896: 19: * SPF: домен "mosimag.ru" прошел проверку SPF; и домен согласован с DMARC
Thu 2024-12-05 02:08:22.897: 19: * DKIM: домен "mosimag.ru" (from d= of signature #1) подтвержден; и домен согласован с DMARC
Thu 2024-12-05 02:08:22.897: 19: * Результат: pass
Thu 2024-12-05 02:08:22.897: 19: ---- Конец результатов DMARC
Thu 2024-12-05 02:08:22.899: 06: Passing message through AntiVirus (Size: 24042)...
Thu 2024-12-05 02:08:22.945: 06: * Сообщение, проверенное с помощью (IKARUS: clean (0.02197s)) (ClamAV: clean (0.00630s)) не содержит вирусов
Thu 2024-12-05 02:08:22.945: 06: ---- End AntiVirus results
Thu 2024-12-05 02:08:23.416: 11: Passing message through Outbreak Protection...
Thu 2024-12-05 02:08:23.416: 11: * Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:23.416: 11: * Reference-ID: str=0001.0A682F23.67507F06.0014,ss=3,re=0.000,recu=0.000,cl=3,cld=1,fgs=0
Thu 2024-12-05 02:08:23.416: 11: * Virus result: 0 - Clean
Thu 2024-12-05 02:08:23.416: 11: * Spam result: 3 - Spam (bulk)
Thu 2024-12-05 02:08:23.416: 11: * IWF result: 0 - Clean
Thu 2024-12-05 02:08:23.416: 11: ---- End Outbreak Protection results
Thu 2024-12-05 02:08:23.418: 07: Passing message through Spam Filter (Size: 24042)...
Thu 2024-12-05 02:08:29.897: 07: * 3.0 MDAEMON_DNSBL MDaemon: marked by MDaemon's DNSBL
Thu 2024-12-05 02:08:29.897: 07: * 2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
Thu 2024-12-05 02:08:29.897: 07: * 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
Thu 2024-12-05 02:08:29.897: 07: * blocklist
Thu 2024-12-05 02:08:29.897: 07: * [URI: salatof.ru]
Thu 2024-12-05 02:08:29.897: 07: * 0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2024-12-05 02:08:29.898: 07: * 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Thu 2024-12-05 02:08:29.898: 07: * 0.0 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
Thu 2024-12-05 02:08:29.898: 07: * [176.53.146.73 listed in bl.mailspike.net]
Thu 2024-12-05 02:08:29.898: 07: * 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted
Thu 2024-12-05 02:08:29.898: 07: ---- End SpamAssassin results
Thu 2024-12-05 02:08:29.898: 07: Spam Filter score/req: 10.00/12.0
Thu 2024-12-05 02:08:30.056: 01: Создание сообщения successful: e:\mdaemon\queues\inbound\md5001000020118.msg
Thu 2024-12-05 02:08:30.056: 03: --> 250 2.6.0 Ok, message saved <Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>>
Thu 2024-12-05 02:08:30.115: 02: <-- QUIT
Thu 2024-12-05 02:08:30.115: 03: --> 221 2.0.0 See ya in cyberspace
Thu 2024-12-05 02:08:30.115: 01: SMTP session successful (Bytes in/out: 24883/4011) |
Лог ALL:
Код: Thu 2024-12-05 02:08:10.645: ----------
Thu 2024-12-05 02:08:22.746: Performing DKIM verification
Thu 2024-12-05 02:08:22.746: * File: e:\mdaemon\queues\temp\md5001000002964.tmp
Thu 2024-12-05 02:08:22.746: * Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:22.746: * DKIM-Signature 1: v=1; c=relaxed/relaxed; a=rsa-sha256; s=mail; d=mosimag.ru; t=1733328639; <some tags are not logged>
Thu 2024-12-05 02:08:22.746: * Verification result: good signature
Thu 2024-12-05 02:08:22.746: * Result: pass
Thu 2024-12-05 02:08:22.746: ----------
Thu 2024-12-05 02:08:22.897: Выполняется обработка DMARC
Thu 2024-12-05 02:08:22.897: * Файл: e:\mdaemon\queues\temp\md5001000002964.tmp
Thu 2024-12-05 02:08:22.897: * Код сообщения: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:22.897: * Домен автора: mosimag.ru
Thu 2024-12-05 02:08:22.898: * Домен организации: mosimag.ru
Thu 2024-12-05 02:08:22.898: * Запрашиваемый домен: _dmarc.mosimag.ru
Thu 2024-12-05 02:08:22.898: * Запись политики: v=DMARC1; p=reject; sp=none; pct=30; aspf=r; fo=1; adkim=r; rua=mailto:info@mosimag.ru; ruf=mailto:info@mosimag.ru
Thu 2024-12-05 02:08:22.898: * Проверка механизмов проверки подлинности на согласованность с DMARC
Thu 2024-12-05 02:08:22.898: * SPF: домен "mosimag.ru" прошел проверку SPF; и домен согласован с DMARC
Thu 2024-12-05 02:08:22.898: * DKIM: домен "mosimag.ru" (from d= of signature #1) подтвержден; и домен согласован с DMARC
Thu 2024-12-05 02:08:22.898: * Результат: pass
Thu 2024-12-05 02:08:22.898: ----------
Thu 2024-12-05 02:08:23.423: Dec 5 02:08:23.423 [-8224] info: spamd: connection from services.altn.com [127.0.0.1]:65414 to port 783, fd 5
Thu 2024-12-05 02:08:23.428: Dec 5 02:08:23.428 [-8224] info: spamd: checking message <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru> for (unknown):0
Thu 2024-12-05 02:08:29.884: Dec 5 02:08:29.884 [-8224] info: async: aborting after 6.242 s, deadline shrunk: URIBL, A/13.140.153.78.zen.spamhaus.org, rules: URIBL_SBL_A, URIBL_CSS_A
Thu 2024-12-05 02:08:29.885: Dec 5 02:08:29.885 [-8224] info: async: aborting after 6.126 s, deadline shrunk: URIBL, A/ns1.hostglobal.plus, rules: URIBL_SBL_A, URIBL_CSS_A
Thu 2024-12-05 02:08:29.885: Dec 5 02:08:29.885 [-8224] info: async: aborting after 6.127 s, deadline shrunk: URIBL, A/ns2.hostglobal.plus, rules: URIBL_SBL_A, URIBL_CSS_A
Thu 2024-12-05 02:08:29.892: Dec 5 02:08:29.892 [-8224] info: spamd: identified spam (10.0/5.0) for (unknown):0 in 6.5 seconds, 24437 bytes.
Thu 2024-12-05 02:08:29.892: Dec 5 02:08:29.893 [-8224] info: spamd: result: Y 9 - FREEMAIL_FORGED_REPLYTO,HTML_MESSAGE,MDAEMON_DNSBL,MDAEMON_OP_SPAM_HIGH,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L3,URIBL_ABUSE_SURBL scantime=6.5,size=24437,user=(unknown),uid=0,required_score=5.0,rhost=serv
Thu 2024-12-05 02:08:19.154: Session 00178293; child 0001
Thu 2024-12-05 02:08:19.154: Accepting SMTP connection from 176.53.146.73:45827 to 80.89.10.198:25
Thu 2024-12-05 02:08:19.156: --> 220 mail.MY-DOMAIN.ru ESMTP Thu, 05 Dec 2024 02:08:19 +1000
Thu 2024-12-05 02:08:19.296: <-- EHLO mail.mosimag.ru
Thu 2024-12-05 02:08:19.297: --> 250-mail.MY-DOMAIN.ru Hello mail.mosimag.ru [176.53.146.73], pleased to meet you
Thu 2024-12-05 02:08:19.297: --> 250-ETRN
Thu 2024-12-05 02:08:19.297: --> 250-AUTH LOGIN PLAIN
Thu 2024-12-05 02:08:19.297: --> 250-8BITMIME
Thu 2024-12-05 02:08:19.297: --> 250-ENHANCEDSTATUSCODES
Thu 2024-12-05 02:08:19.297: --> 250-PIPELINING
Thu 2024-12-05 02:08:19.297: --> 250-CHUNKING
Thu 2024-12-05 02:08:19.297: --> 250-STARTTLS
Thu 2024-12-05 02:08:19.297: --> 250 SIZE
Thu 2024-12-05 02:08:19.417: <-- STARTTLS
Thu 2024-12-05 02:08:19.417: --> 220 2.7.0 Ready to start TLS
Thu 2024-12-05 02:08:19.715: Обмен данными SSL выполнен успешно (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Thu 2024-12-05 02:08:19.843: <-- EHLO mail.mosimag.ru
Thu 2024-12-05 02:08:19.843: --> 250-mail.MY-DOMAIN.ru Hello mail.mosimag.ru [176.53.146.73], pleased to meet you
Thu 2024-12-05 02:08:19.843: --> 250-ETRN
Thu 2024-12-05 02:08:19.843: --> 250-AUTH LOGIN PLAIN
Thu 2024-12-05 02:08:19.843: --> 250-8BITMIME
Thu 2024-12-05 02:08:19.843: --> 250-ENHANCEDSTATUSCODES
Thu 2024-12-05 02:08:19.843: --> 250-PIPELINING
Thu 2024-12-05 02:08:19.843: --> 250-CHUNKING
Thu 2024-12-05 02:08:19.843: --> 250-REQUIRETLS
Thu 2024-12-05 02:08:19.843: --> 250 SIZE
Thu 2024-12-05 02:08:19.965: <-- MAIL FROM:<doc@mosimag.ru>
Thu 2024-12-05 02:08:19.965: Performing PTR lookup (73.146.53.176.IN-ADDR.ARPA)
Thu 2024-12-05 02:08:20.083: * D=73.146.53.176.IN-ADDR.ARPA TTL=(82) PTR=[mosimag.ru]
Thu 2024-12-05 02:08:20.212: * D=mosimag.ru TTL=(421) A=[176.53.146.73]
Thu 2024-12-05 02:08:20.212: ---- End PTR results
Thu 2024-12-05 02:08:20.212: Performing IP lookup (mail.mosimag.ru)
Thu 2024-12-05 02:08:20.338: * D=mail.mosimag.ru TTL=(405) A=[176.53.146.73]
Thu 2024-12-05 02:08:20.338: ---- End IP lookup results
Thu 2024-12-05 02:08:20.338: Performing IP lookup (mosimag.ru)
Thu 2024-12-05 02:08:20.457: * D=mosimag.ru TTL=(625) A=[176.53.146.73]
Thu 2024-12-05 02:08:20.457: ---- End IP lookup results
Thu 2024-12-05 02:08:20.457: Performing SPF lookup (mail.mosimag.ru / 176.53.146.73)
Thu 2024-12-05 02:08:20.820: * Result: none; no SPF record in DNS
Thu 2024-12-05 02:08:20.820: ---- End SPF results
Thu 2024-12-05 02:08:20.820: Performing SPF lookup (mosimag.ru / 176.53.146.73)
Thu 2024-12-05 02:08:20.947: * Policy: v=spf1 a mx ip4:176.53.146.73 ~all
Thu 2024-12-05 02:08:21.072: * Evaluating a: match
Thu 2024-12-05 02:08:21.072: * Result: pass
Thu 2024-12-05 02:08:21.072: ---- End SPF results
Thu 2024-12-05 02:08:21.072: --> 250 2.1.0 Sender OK
Thu 2024-12-05 02:08:21.255: <-- RCPT TO:<salesvvo@MY-DOMAIN.ru>
Thu 2024-12-05 02:08:21.285: Производится поиск DNS-BL (176.53.146.73 – соединение с IP)
Thu 2024-12-05 02:08:21.442: * b.barracudacentral.org - прошло
Thu 2024-12-05 02:08:21.689: * bl.spamcop.net - не удалось - 127.0.0.2
Thu 2024-12-05 02:08:21.808: * dnsbl.sorbs.net - прошло
Thu 2024-12-05 02:08:22.088: * dnsbl-1.uceprotect.net - не удалось - 127.0.0.2
Thu 2024-12-05 02:08:22.235: * db.wpbl.info - прошло
Thu 2024-12-05 02:08:22.235: ---- Конечные результаты DNS-BL
Thu 2024-12-05 02:08:22.241: --> 250 2.1.5 Recipient OK
Thu 2024-12-05 02:08:22.374: <-- DATA
Thu 2024-12-05 02:08:22.376: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2024-12-05 02:08:22.615: Message size: 24042 bytes
Thu 2024-12-05 02:08:22.618: Performing DKIM verification
Thu 2024-12-05 02:08:22.618: * File: e:\mdaemon\queues\temp\md5001000002964.tmp
Thu 2024-12-05 02:08:22.618: * Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:22.745: * DKIM-Signature 1: v=1; c=relaxed/relaxed; a=rsa-sha256; s=mail; d=mosimag.ru; t=1733328639; <some tags are not logged>
Thu 2024-12-05 02:08:22.745: * Verification result: good signature
Thu 2024-12-05 02:08:22.745: * Result: pass
Thu 2024-12-05 02:08:22.746: ---- End DKIM results
Thu 2024-12-05 02:08:22.756: Выполняется обработка DMARC
Thu 2024-12-05 02:08:22.756: * Файл: e:\mdaemon\queues\temp\md5001000002964.tmp
Thu 2024-12-05 02:08:22.756: * Код сообщения: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:22.756: * Домен автора: mosimag.ru
Thu 2024-12-05 02:08:22.756: * Домен организации: mosimag.ru
Thu 2024-12-05 02:08:22.756: * Запрашиваемый домен: _dmarc.mosimag.ru
Thu 2024-12-05 02:08:22.877: * Запись политики: v=DMARC1; p=reject; sp=none; pct=30; aspf=r; fo=1; adkim=r; rua=mailto:info@mosimag.ru; ruf=mailto:info@mosimag.ru
Thu 2024-12-05 02:08:22.896: * Проверка механизмов проверки подлинности на согласованность с DMARC
Thu 2024-12-05 02:08:22.896: * SPF: домен "mosimag.ru" прошел проверку SPF; и домен согласован с DMARC
Thu 2024-12-05 02:08:22.897: * DKIM: домен "mosimag.ru" (from d= of signature #1) подтвержден; и домен согласован с DMARC
Thu 2024-12-05 02:08:22.897: * Результат: pass
Thu 2024-12-05 02:08:22.897: ---- Конец результатов DMARC
Thu 2024-12-05 02:08:22.899: Passing message through AntiVirus (Size: 24042)...
Thu 2024-12-05 02:08:22.945: * Сообщение, проверенное с помощью (IKARUS: clean (0.02197s)) (ClamAV: clean (0.00630s)) не содержит вирусов
Thu 2024-12-05 02:08:22.945: ---- End AntiVirus results
Thu 2024-12-05 02:08:23.416: Passing message through Outbreak Protection...
Thu 2024-12-05 02:08:23.416: * Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:23.416: * Reference-ID: str=0001.0A682F23.67507F06.0014,ss=3,re=0.000,recu=0.000,cl=3,cld=1,fgs=0
Thu 2024-12-05 02:08:23.416: * Virus result: 0 - Clean
Thu 2024-12-05 02:08:23.416: * Spam result: 3 - Spam (bulk)
Thu 2024-12-05 02:08:23.416: * IWF result: 0 - Clean
Thu 2024-12-05 02:08:23.416: ---- End Outbreak Protection results
Thu 2024-12-05 02:08:23.418: Passing message through Spam Filter (Size: 24042)...
Thu 2024-12-05 02:08:29.897: * 3.0 MDAEMON_DNSBL MDaemon: marked by MDaemon's DNSBL
Thu 2024-12-05 02:08:29.897: * 2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
Thu 2024-12-05 02:08:29.897: * 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
Thu 2024-12-05 02:08:29.897: * blocklist
Thu 2024-12-05 02:08:29.897: * [URI: salatof.ru]
Thu 2024-12-05 02:08:29.897: * 0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2024-12-05 02:08:29.898: * 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Thu 2024-12-05 02:08:29.898: * 0.0 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
Thu 2024-12-05 02:08:29.898: * [176.53.146.73 listed in bl.mailspike.net]
Thu 2024-12-05 02:08:29.898: * 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted
Thu 2024-12-05 02:08:29.898: ---- End SpamAssassin results
Thu 2024-12-05 02:08:29.898: Spam Filter score/req: 10.00/12.0
Thu 2024-12-05 02:08:30.056: Создание сообщения successful: e:\mdaemon\queues\inbound\md5001000020118.msg
Thu 2024-12-05 02:08:30.056: --> 250 2.6.0 Ok, message saved <Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>>
Thu 2024-12-05 02:08:30.115: <-- QUIT
Thu 2024-12-05 02:08:30.115: --> 221 2.0.0 See ya in cyberspace
Thu 2024-12-05 02:08:30.115: SMTP session successful (Bytes in/out: 24883/4011)
Thu 2024-12-05 02:08:30.116: ----------
Thu 2024-12-05 02:08:30.126: Performing SPF lookup (mail.mosimag.ru / 176.53.146.73)
Thu 2024-12-05 02:08:30.126: * Result: none; no SPF record in DNS
Thu 2024-12-05 02:08:30.126: ----------
Thu 2024-12-05 02:08:30.126: Performing SPF lookup (mosimag.ru / 176.53.146.73)
Thu 2024-12-05 02:08:30.126: * Policy: v=spf1 a mx ip4:176.53.146.73 ~all
Thu 2024-12-05 02:08:30.126: * Evaluating a: match
Thu 2024-12-05 02:08:30.126: * Result: pass
Thu 2024-12-05 02:08:30.126: ----------
Thu 2024-12-05 02:08:30.126: (SMTP) Spam Filter processing e:\mdaemon\queues\temp\md5001000002964.tmp...
Thu 2024-12-05 02:08:30.126: * Message return-path: doc@mosimag.ru
Thu 2024-12-05 02:08:30.127: * Message ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:30.127: Start SpamAssassin results
Thu 2024-12-05 02:08:30.127: 10.00 points, 5.0 required;
Thu 2024-12-05 02:08:30.127: * 3.0 MDAEMON_DNSBL MDaemon: marked by MDaemon's DNSBL
Thu 2024-12-05 02:08:30.127: * 2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
Thu 2024-12-05 02:08:30.127: * 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
Thu 2024-12-05 02:08:30.127: * blocklist
Thu 2024-12-05 02:08:30.127: * [URI: salatof.ru]
Thu 2024-12-05 02:08:30.127: * 0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2024-12-05 02:08:30.127: * 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Thu 2024-12-05 02:08:30.127: * 0.0 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
Thu 2024-12-05 02:08:30.127: * [176.53.146.73 listed in bl.mailspike.net]
Thu 2024-12-05 02:08:30.127: * 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted
Thu 2024-12-05 02:08:30.127: End SpamAssassin results
Thu 2024-12-05 02:08:30.128: ----------
Thu 2024-12-05 02:08:30.128: Passing message through Outbreak Protection...
Thu 2024-12-05 02:08:30.128: * Message-ID: <aabaf37a76bf95983b91d8b24683a76dfe00@mosimag.ru>
Thu 2024-12-05 02:08:30.128: * Reference-ID: str=0001.0A682F23.67507F06.0014,ss=3,re=0.000,recu=0.000,cl=3,cld=1,fgs=0
Thu 2024-12-05 02:08:30.128: * Virus result: 0 - Clean
Thu 2024-12-05 02:08:30.128: * Spam result: 3 - Spam (bulk)
Thu 2024-12-05 02:08:30.128: * IWF result: 0 - |
Добавлено:
Цитата: Profiks1 По хидерам в первом окне
X-Spam-Status: No, score=4.5 required=5.0 tests=FREEMAIL_FORGED_REPLYTO,
4.5 меньше чем 5.0, потому статус NO. Тут все правильно.
Касательно логов, где 10.00 points, 5.0 required;
Покажи или сам погляди настройку - Фильтр спама.
Вероятно у тебя стоит птица на дефолтовое значение :
...пометить как спам , но разрешить продолжение его доставки.
Тут думай или поменяй на
...удалять спам немедленно
или на
...поместить сообщение в публичную папку спама-ловушки
Я бы оставил дефолтовое значение помечать как спам, но пропускать к клиенту, пусть тот сам решает.
Если поставить - удалять немедленно, то при ложном срабатывании письмо будет утеряно. Иногда это чревато потерей важного письма
Если пихать в папку спам-ловушки, то кто будет туда глядеть и разгребать накопившийся спам? Ты? Тебе оно надо?
|
У меня стоит - Пометить как спам , но разрешить продолжение его доставки.
Создано правило IMAP для юзеров. Если в заголовке письма есть Spam status: YES , перемещать в папку Junk Email.
Я не могу понять, почему во втором заголовке стоит 10.00 points, 5.0 required; , а на первом score=4.5 required=5.0. Соответственно применяется фильтр первого заголовка и письмо не попадает в Spam папку. Как сделать, чтоб SpamAssasin выдавал рейтиг письма как на втором заголовке или фильтровать по 2 - му заголовку. |
