I'm a little bit confused because I've just discovered that my Zimbra main install in office is not checking SPF for incoming email (through spamassassin), not for all incoming messages (at least).
Let me explain scenario:
my relevant part of sauser.cf file is the followingRelease 8.8.15.GA.3869.UBUNTU18.64 UBUNTU18_64 FOSS edition, Patch 8.8.15_P33
Code: Select all
ifplugin Mail::SpamAssassin::Plugin::SPF
score SPF_PASS -0.01
score SPF_NEUTRAL 0
score SPF_FAIL 2.0
score SPF_SOFTFAIL 1.0
score SPF_NONE 4.0
score SPF_HELO_PASS -0.01
score SPF_HELO_NEUTRAL 0
score SPF_HELO_FAIL 2.0
score SPF_HELO_SOFTFAIL 1.0
score SPF_HELO_NONE 2.0
score T_SPF_HELO_TEMPERROR 0.1
score T_SPF_TEMPERROR 0.1
header T_LOCAL_VALID subject =~ /test/i
describe T_LOCAL_VALID A test rule to see if an if block is executing
score T_LOCAL_VALID -0.1
endif
Code: Select all
grep SPF /var/log/zimbra.log|grep Module
Sep 20 15:31:15 mail amavis[15475]: Module Mail::SPF v2.009
As you can see sending and email from Gmail to my personal email (the one on the server I'm testing) is pretty obvious that T_SPF_HELO_TEMPERROR & T_SPF_TEMPERROR are scored, even the T_LOCAL_VALID score is flagged, so the module is loaded and the score is setup through spamassassin (sanitized email addresses)
Code: Select all
Sep 20 15:27:50 mail amavis[10639]: (10639-02) spam-tag, <example@gmail.com> -> <example@domain.com>, No, score=4.492 required=6 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.01, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=2, FSL_BULK_SIG=0.001, HTML_MESSAGE=0.001, PYZOR_CHECK=2.5, T_LOCAL_VALID=-0.1, T_SPF_HELO_TEMPERROR=0.1, T_SPF_TEMPERROR=0.1] autolearn=disabled
OUTLOOK.COM -> ZIMBRA TEST EMAIL
Code: Select all
Sep 20 15:56:58 mail amavis[4596]: (04596-12) spam-tag, <example@outlook.com> -> <example@domain.com>, No, score=4.591 required=6 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.01, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=2, HTML_MESSAGE=0.001, PYZOR_CHECK=2.5, T_SPF_HELO_TEMPERROR=0.1, T_SPF_TEMPERROR=0.1] autolearn=disabled
Using another Zimbra server as sender (same versione 8.8.15), it seems that SPF check is done correctly
Code: Select all
Sep 20 15:53:19 mail amavis[1496]: (01496-12) spam-tag, <external@zimbra.com> -> <example@domain.com>, No, score=3.582 required=6 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.01, DKIM_VALID_AU=-0.1, DMARC_PASS_QUAR=-1, FSL_BULK_SIG=0.001, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.1, PYZOR_CHECK=2.5, SPF_HELO_NONE=2, SPF_PASS=-0.01] autolearn=disabled
For testing purposes I've replicated THE EXACT SAME TESTS on 2nd Zimbra install, the external one, based on same version (without any spamassassin customization at all) and the result is absolutly IDENTICAL.
Can you please help me with this rebus?
Kind regards,
Andrea