1

Topic: Spam Score for FROM_ADDR_WS / bad header

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.4.2
- Deployed with iRedMail Easy or the downloadable installer? Installer
- Linux/BSD distribution name and version: Debian 10.11
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi there,

we experience problems with headers containing a FROM like this ...

From: =?utf-7?B?UHJvZi5gRHIuIFJ2ZGkgU3NobWllZGU=?= <user@mail.exampl
        e.org>

The newline in FROM should be okay regarding to RFCs.
The spam-status for those mails:

X-Spam-Status: No, score=4.259 tagged_above=2 required=6.2
        tests=[ALL_TRUSTED=-1, DKIM_ADSP_NXDOMAIN=0.8, FROM_ADDR_WS=2.999,
        FROM_EXCESS_BASE64=0.105, HEADER_FROM_DIFFERENT_DOMAINS=0.249,
        HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.105]

I tried to deactivate the "bad header check" in iRedAdmin-Pro for those users, to get rid of the score for FROM_ADDR_WS, but i didn't work. Spamassasin is inactive, and there is no setting for FROM_ADDR_WS in /etc/amavis.

Anyone an idea?

Thanks in advance

2

Re: Spam Score for FROM_ADDR_WS / bad header

you can set the score for FROM_ADDR_WS manually to 0 so it disables this check completly, this is not rladed to iredmail/amavis, its from spamasassin

3 (edited by jobu 2021-11-23 18:20:27)

Re: Spam Score for FROM_ADDR_WS / bad header

Thanks for the reply, it seems spamassassin is not in use, but amavis seems to read out those settings. The spam score for FROM_ADDR_WS vanished now. My initial problem still exists, the sender gets a bounce message, my best guess is because of the newline in FROM.

4

Re: Spam Score for FROM_ADDR_WS / bad header

jobu wrote:

the sender gets a bounce message

What's the content of bounce message? It's useful for troubleshooting.

----

Buy me a cup of coffee ($5) to support iRedMail:

buy me a cup of coffee