Package: spamass-milter
Version: 0.4.0-1+b1
Severity: important
Dear Maintainer,
* What led up to the situation?
Migration from CentOS 7 to Debian buster. Minor configuration file changes from
CentOS due to Postfix chroot, but was working there. Users reported missing
mail on Debian which we discovered was being routed to system
junk files due to SPF failures from spamassassin.
* What exactly did you do (or not do) that was effective (or
ineffective)?
Removing the spamass-milter from the stream and letting the spamc program be
run at delivery time via procmail dropped the number of unparseable relay
e-mails (and several subsequent SPF failures) from 2600 or so per day
to around 100 per day. No changes to the spamassassin configuration - just
dropping the spamass-milter. Since SPF is failing, it is almost certainly the
last hop that is not parsed right (usually the first listed).
A sample is included... I didn't test this message, but I did test some others
that failed by running them directly through spamc and they gave a correct
report with no unparseable relay errors.
Return-Path: <emailaddressremo...@nfpa.org>
Delivered-To: emailaddressremo...@autoelect.com
Received: from NFRSProdINF1.us.nfpa.org (NFRSProdINF1.us.nfpa.org
[161.47.147.140])
by postoffice-2.autoelect.com (Postfix) with ESMTP id 5100AA03E0
for <emailaddressremo...@autoelect.com>; Tue, 6 Jul 2021 12:31:48
-0600 (MDT)
DKIM-Filter: OpenDKIM Filter v2.11.0 postoffice-2.autoelect.com 5100AA03E0
Received: from NFRSProdWeb10.us.nfpa.org ([172.24.32.139]) by
NFRSProdINF1.us.nfpa.org with Microsoft SMTPSVC(10.0.14393.4169);
Tue, 6 Jul 2021 14:31:47 -0400
Received: from NFRSProdWeb10 ([127.0.0.1]) by NFRSProdWeb10.us.nfpa.org with
Microsoft SMTPSVC(10.0.14393.4169);
Tue, 6 Jul 2021 14:31:47 -0400
MIME-Version: 1.0
From: emailaddressremo...@nfpa.org
To: emailaddressremo...@autoelect.com
Date: 6 Jul 2021 14:31:47 -0400
Subject: NFPA 70 Document Alert
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
Message-ID: <nfrsprodweb10akfmw100081...@nfrsprodweb10.us.nfpa.org>
X-OriginalArrivalTime: 06 Jul 2021 18:31:47.0761 (UTC)
FILETIME=[2DF78A10:01D77295]
X-Greylist: Sender DNS name whitelisted, not delayed by milter-greylist-4.5.11
(postoffice-2.autoelect.com [207.109.102.68]); Tue, 06 Jul 2021 12:31:48 -0600
(MDT)
X-Virus-Scanned: clamav-milter 0.103.2 at postoffice-2.autoelect.com
X-Virus-Status: Clean
X-Spam-Status: No, score=3.7 required=7.0 tests=HTML_IMAGE_ONLY_20,
HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RDNS_NONE,SPF_FAIL,
T_REMOTE_IMAGE,UNPARSEABLE_RELAY autolearn=no autolearn_force=no
version=3.4.2
X-Spam-Report:
* 0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
* [SPF failed: Please see
http://www.openspf.org/Why?s=mfrom;id=EmailAddressRemoved%40nfpa.org;ip=172.24.32.139;r=postoffice-2.autoelect.com]
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of
* words
* 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
* lines
* 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
* 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
* tag
* 0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
postoffice-2.autoelect.com
body of message omitted.
* What was the outcome of this action?
Mail was incorrectly flagged as forged and hid from the user.
* What outcome did you expect instead?
Mail to be correctly parsed and delivered.
-- System Information:
Debian Release: 10.10
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-0.bpo.7-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages spamass-milter depends on:
ii adduser 3.118
ii libc6 2.28-10
ii libgcc1 1:8.3.0-6
ii libmilter1.0.1 8.15.2-14~deb10u1
ii libstdc++6 8.3.0-6
ii spamc 3.4.2-1+deb10u3
Versions of packages spamass-milter recommends:
ii postfix 3.4.14-0+deb10u1
ii spamassassin 3.4.2-1+deb10u3
spamass-milter suggests no packages.
-- Configuration Files:
/etc/default/spamass-milter changed [not included]
-- no debconf information
