Письма с отрицательным X-spam-Score попадают в папку spam

Post Reply
alexk
Posts: 7
Joined: Fri Jul 24, 2020 2:34 pm

Письма с отрицательным X-spam-Score попадают в папку spam

Post by alexk »

Добрый день!

Относительно недавно появилась проблема у некоторых пользователей, в папку junk стали попадать письма от отправителей у которых X-Spam-status отрицательный.
Через web проверил отсутствие черных/белых списков пользователей, удалил почтовые аккаунты с мобильных устройств чтобы исключить перенос почты в папки на телефоне, но письма так и попадают в spam.
Может у кого есть идеи как это можно исправить?

Code: Select all

X-Virus-Scanned: amavisd-new at my-comp.ru
X-Spam-Flag: NO
X-Spam-Score: -98.546
X-Spam-Level:
X-Spam-Status: No, score=-98.546 required=6.6 WHITELISTED tests=[AM.WBL=-100,
	BAYES_00=-1.9, HTML_MESSAGE=0.001, KAM_SHORT=0.001, MIXED_ES=2.685,
	SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001]
Логи сервера
Письмо от sender@another.ru приходит на почтовый ящик recipient@my-comp.ru и пересылается на recipient@yandex.ru

Code: Select all

Apr 13 10:41:04 mail postfix/smtpd[3350]: connect from mail.another.ru[10.10.10.10]
Apr 13 10:41:04 mail postfix/smtpd[3350]: Anonymous TLS connection established from mail.another.ru[10.10.10.10]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Apr 13 10:41:04 mail postfix/smtpd[3350]: NOQUEUE: filter: RCPT from mail.another.ru[10.10.10.10]: <sender@another.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10026; from=<sender@another.ru> to=<recipient@my-comp.ru> proto=ESMTP helo=<mail.another.ru>
Apr 13 10:41:04 mail postfix/smtpd[3350]: NOQUEUE: filter: RCPT from mail.another.ru[10.10.10.10]: <sender@another.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10024; from=<sender@another.ru> to=<recipient@my-comp.ru> proto=ESMTP helo=<mail.another.ru>
Apr 13 10:41:04 mail postfix/smtpd[3350]: 9C739676AEE: client=mail.another.ru[10.10.10.10]
Apr 13 10:41:04 mail postfix/cleanup[3504]: 9C739676AEE: message-id=<3852219ae5134a2481a3800f424d12e6@ex01>
Apr 13 10:41:04 mail postfix/qmgr[4444]: 9C739676AEE: from=<sender@another.ru>, size=16003, nrcpt=2 (queue active)
Apr 13 10:41:04 mail postfix/smtpd[3350]: disconnect from mail.another.ru[10.10.10.10] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Apr 13 10:41:04 mail amavis[13618]: (13618-06) ESMTP [127.0.0.1]:10024 /opt/zimbra/data/amavisd/tmp/amavis-20210413T091759-13618-AQAjkXUj: <sender@another.ru> -> <recipient@my-comp.ru>,<recipient@yandex.ru> SIZE=16003 Received: from mail.my-comp.ru ([127.0.0.1]) by localhost (mail.my-comp.ru [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Tue, 13 Apr 2021 10:41:04 +0300 (MSK)
Apr 13 10:41:04 mail amavis[13618]: (13618-06) Checking: 0oCJ07CjGvHP [10.10.10.10] <sender@another.ru> -> <recipient@my-comp.ru>,<recipient@yandex.ru>
Apr 13 10:41:04 mail amavis[13618]: (13618-06) Open relay? Nonlocal recips but not originating: recipient@yandex.ru
Apr 13 10:41:04 mail amavis[13618]: (13618-06) p004 1 Content-Type: multipart/related
Apr 13 10:41:04 mail amavis[13618]: (13618-06) p005 1/1 Content-Type: multipart/alternative
Apr 13 10:41:04 mail amavis[13618]: (13618-06) p001 1/1/1 Content-Type: text/plain, size: 397 B, name:
Apr 13 10:41:04 mail amavis[13618]: (13618-06) p002 1/1/2 Content-Type: text/html, size: 4887 B, name:
Apr 13 10:41:04 mail amavis[13618]: (13618-06) p003 1/2 Content-Type: image/png, size: 4663 B, name: image001.png
Apr 13 10:41:04 mail amavis[13618]: (13618-06) wbl: soft-whitelisted (-100) sender <sender@another.ru> => <recipient@my-comp.ru>, recip_key="."
Apr 13 10:41:04 mail amavis[13618]: (13618-06) wbl: soft-whitelisted (-100) sender <sender@another.ru> => <recipient@yandex.ru>, recip_key="."
Apr 13 10:41:06 mail amavis[3810]: (13618-06) SA info: util: setuid: ruid=999 euid=999 rgid=999 5 998 999 egid=999 5 998 999
Apr 13 10:41:06 mail amavis[13618]: (13618-06) _WARN: Negative repeat count does nothing at /opt/zimbra/common/sbin/amavisd line 16413.
Apr 13 10:41:06 mail amavis[13618]: (13618-06) spam-tag, <sender@another.ru> -> <recipient@my-comp.ru>, No, score=-101.232 required=6.6 tests=[AM.WBL=-100, BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Apr 13 10:41:06 mail postfix/amavisd/smtpd[3786]: connect from localhost[127.0.0.1]
Apr 13 10:41:06 mail postfix/amavisd/smtpd[3786]: 3D08E676D64: client=localhost[127.0.0.1]
Apr 13 10:41:06 mail postfix/cleanup[3504]: 3D08E676D64: message-id=<3852219ae5134a2481a3800f424d12e6@ex01>
Apr 13 10:41:06 mail postfix/amavisd/smtpd[3786]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Apr 13 10:41:06 mail amavis[13618]: (13618-06) 0oCJ07CjGvHP FWD from <sender@another.ru> -> <recipient@my-comp.ru>, BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3D08E676D64
Apr 13 10:41:06 mail postfix/qmgr[4444]: 3D08E676D64: from=<sender@another.ru>, size=16670, nrcpt=1 (queue active)
Apr 13 10:41:06 mail postfix/amavisd/smtpd[26060]: connect from localhost[127.0.0.1]
Apr 13 10:41:06 mail postfix/amavisd/smtpd[26060]: 3F20E676E1D: client=localhost[127.0.0.1]
Apr 13 10:41:06 mail postfix/cleanup[3504]: 3F20E676E1D: message-id=<3852219ae5134a2481a3800f424d12e6@ex01>
Apr 13 10:41:06 mail postfix/amavisd/smtpd[26060]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Apr 13 10:41:06 mail amavis[13618]: (13618-06) 0oCJ07CjGvHP FWD from <sender@another.ru> -> <recipient@yandex.ru>, BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3F20E676E1D
Apr 13 10:41:06 mail postfix/qmgr[4444]: 3F20E676E1D: from=<sender@another.ru>, size=16412, nrcpt=1 (queue active)
Apr 13 10:41:06 mail amavis[13618]: (13618-06) Passed CLEAN {RelayedInbound,RelayedOpenRelay}, [10.10.10.10]:33998 <sender@another.ru> -> <recipient@my-comp.ru>,<recipient@yandex.ru>, Queue-ID: 9C739676AEE, Message-ID: <3852219ae5134a2481a3800f424d12e6@ex01>, mail_id: 0oCJ07CjGvHP, Hits: -101.232, size: 16002, queued_as: 3D08E676D64/3F20E676E1D, 1617 ms
Apr 13 10:41:06 mail amavis[13618]: (13618-06) TIMING-SA [total 1483 ms, cpu 532 ms] - parse: 1.36 (0.1%), extract_message_metadata: 12 (0.8%), get_uri_detail_list: 0.99 (0.1%), tests_pri_-1000: 3.3 (0.2%), tests_pri_-950: 0.62 (0.0%), tests_pri_-900: 0.73 (0.0%), tests_pri_-90: 10 (0.7%), check_bayes: 9 (0.6%), b_tokenize: 4.0 (0.3%), b_tok_get_all: 1.54 (0.1%), b_comp_prob: 2.0 (0.1%), b_tok_touch_all: 0.13 (0.0%), b_finish: 0.32 (0.0%), tests_pri_0: 784 (52.9%), check_dkim_adsp: 58 (3.9%), check_spf: 342 (23.1%), poll_dns_idle: 295 (19.9%), tests_pri_10: 0.54 (0.0%), tests_pri_20: 571 (38.5%), check_razor2: 570 (38.5%), tests_pri_30: 87 (5.9%), check_pyzor: 86 (5.8%), tests_pri_500: 4.8 (0.3%), get_report: 0.56 (0.0%)
Apr 13 10:41:06 mail postfix/smtp[3505]: 9C739676AEE: to=<recipient@my-comp.ru>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.7, delays=0.04/0/0/1.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3D08E676D64)
Apr 13 10:41:06 mail postfix/smtp[3505]: 9C739676AEE: to=<recipient@yandex.ru>, orig_to=<recipient@my-comp.ru>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.7, delays=0.04/0/0/1.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3D08E676D64)
Apr 13 10:41:06 mail amavis[13618]: (13618-06) size: 16002, TIMING [total 1619 ms, cpu 572 ms, AM-cpu 40 ms, SA-cpu 532 ms] - SMTP greeting: 2.1 (0%)0, SMTP EHLO: 0.8 (0%)0, SMTP pre-MAIL: 0.7 (0%)0, lookup_ldap: 4.8 (0%)1, lookup_ldap: 1.3 (0%)1, SMTP pre-DATA-flush: 0.5 (0%)1, SMTP DATA: 32 (2%)3, check_init: 0.2 (0%)3, digest_hdr: 0.8 (0%)3, digest_body_dkim: 0.1 (0%)3, collect_info: 1.8 (0%)3, mime_decode: 8 (0%)3, get-file-type3: 6 (0%)4, parts_decode: 0.1 (0%)4, check_header: 0.4 (0%)4, AV-scan-1: 52 (3%)7, spam-wb-list: 1.4 (0%)7, SA msg read: 0.3 (0%)7, SA parse: 1.7 (0%)7, SA check: 1480 (91%)98, decide_mail_destiny: 5 (0%)99, notif-quar: 0.2 (0%)99, fwd-connect: 3.1 (0%)99, fwd-mail-pip: 2.0 (0%)99, fwd-rcpt-pip: 0.1 (0%)99, fwd-data-chkpnt: 0.0 (0%)99, write-header: 0.3 (0%)99, fwd-data-contents: 0.1 (0%)99, fwd-end-chkpnt: 1.1 (0%)99, fwd-connect: 1.3 (0%)99, fwd-mail-pip: 6 (0%)100, fwd-rcpt-pip: 0.1 (0%)100, fwd-data-chkpnt: 0.0 (0%)100, write-header: 0.3 (0%)100, fwd-data-contents: 0...
Apr 13 10:41:06 mail amavis[13618]: (13618-06) ....1 (0%)100, fwd-end-chkpnt: 1.1 (0%)100, prepare-dsn: 0.3 (0%)100, report: 0.8 (0%)100, main_log_entry: 2.0 (0%)100, update_snmp: 0.3 (0%)100, SMTP pre-response: 0.1 (0%)100, SMTP response: 0.2 (0%)100, unlink-4-files: 0.1 (0%)100, rundown: 0.6 (0%)100
Apr 13 10:41:06 mail amavis[13618]: (13618-06) size: 16002, RUSAGE minflt=12015+1714, majflt=0+0, nswap=0+0, inblock=0+0, oublock=184+40, msgsnd=0+0, msgrcv=0+0, nsignals=0+0, nvcsw=47+2, nivcsw=130+2, maxrss=322964+311980, ixrss=0+0, idrss=0+0, isrss=0+0, utime=0.528+0.016, stime=0.020+0.008
Apr 13 10:41:06 mail postfix/qmgr[4444]: 9C739676AEE: removed
Apr 13 10:41:06 mail postfix/lmtp[3787]: 3D08E676D64: to=<recipient@my-comp.ru>, relay=mail.my-comp.ru[10.200.4.4]:7025, delay=0.15, delays=0/0/0.09/0.06, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)
Apr 13 10:41:06 mail postfix/qmgr[4444]: 3D08E676D64: removed
Apr 13 10:41:07 mail postfix/smtp[3788]: 3F20E676E1D: to=<recipient@yandex.ru>, relay=mx.yandex.ru[77.88.21.249]:25, delay=1.2, delays=0/0/0.29/0.88, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued on sas2-b0e6f85f94f2.qloud-c.yandex.net as 1618299667-ABP44TipKl-f6aaZRnw)
Apr 13 10:41:07 mail postfix/qmgr[4444]: 3F20E676E1D: removed
Post Reply