Dotaz: Rspamd - konfigurace

[Pfemir]

Dobrý den, potřeboval bych poradi s konfigurací Rspamd. Stahuji přes fetchmail poštu ze svých schránek (seznam, centrum, atd.) k sobě na server kde mi běží dovecot a postfix. Problém je, že pokud se jedná o spam, tak to Rspamd vyhodnotí jako spam, což je OK, fetchmail to nestáhne a pošle mi chybový e-mail, ve kterém je:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error.

Reason: Some addresses were rejected by the MDA fetchmail forwards to.

The following address(es) failed:
muj@email.cz
   SMTP error: 554 5.7.1 Service unavailable; Sender address [ditabbrysmxsmid@shedoesntknow.info] blocked using dbl.spamhaus.org; https://www.spamhaus.org/query/domain/shedoesntknow.info

Problém ale je, že ten spam zůstane ve schránce, takže se to celé opakuje každou minutu (fetchmail mám nastavený na minutu). Potřeboval bych, aby to ten spam buď úplně zahodilo nebo aby se stáhl, já si ho vyfiltruji do spamové složky a pak jednou za čas smažu. Ale vůbec nevím jak na to, když se dívám do Rspamd web gui, tak tam ohledně konfigurace nic moc nevidím.

Předem děkuji za pomoc.

Odpovědi

[NN]

Jak aktulani mas ten rspamd? Uz by to tam melo davno byt..

[Pfemir]

Mám poslední verzi 1.8.3. A ty zaškrtávátka to bych měl hledat kde? V to Web GUI vůbec nic takového není.

[Franta Hanzlík]

viz parametr "discard_on_reject" (a případně "quarantine_on_reject") v "/etc/rspamd/worker-proxy.inc". Takže nejspíš udělat user modul "/etc/rspamd/local.d/worker-proxy.inc" a do něho dát požadované nastavení.

[Pfemir]

Tak tady s tím bojuji celý den a nic. Je to furt stejné. Zapnul jsem debug_mode pro rspamd, tady je výpis:

2019-03-07T13:18:03.085904+00:00 mail fetchmail-all[831]: fetch user@medialine.cz for user@mojedomena.cz
2019-03-07T13:18:03.271687+00:00 mail fetchmail[834]: Server certificate verification error: self signed certificate
2019-03-07T13:18:03.272612+00:00 mail fetchmail[834]: Missing trust anchor certificate: /C=CZ/ST=Czech Republic/L=Trinec/O=BKS Capital Partners/OU=Automatically-generated POP3 SSL key/CN=email2.cablenet.cz/emailAddress=heczko@nejtv.cz
2019-03-07T13:18:03.272747+00:00 mail fetchmail[834]: This could mean that the root CA's signing certificate is not in the trusted CA certificate location, or that c_rehash needs to be run on the certificate directory. For details, please see the documentation of --sslcertpath and --sslcertfile in the manual page.
2019-03-07T13:18:03.272922+00:00 mail fetchmail[834]: Server certificate verification error: certificate has expired
2019-03-07T13:18:03.295849+00:00 mail fetchmail[834]: Warning: the connection is insecure, continuing anyways. (Better use --sslcertck!)
2019-03-07T13:18:03.414546+00:00 mail fetchmail[834]: 1 message for user@medialine.cz at mail.nejtv.cz.
2019-03-07T13:18:03.468336+00:00 mail postfix/smtpd[835]: connect from localhost[127.0.0.1]
2019-03-07T13:18:03.469484+00:00 mail rspamd[733]: (198124); proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 47177
2019-03-07T13:18:03.478843+00:00 mail postfix/smtpd[835]: warning: restriction `reject_authenticated_sender_login_mismatch' ignored: no SASL support
2019-03-07T13:18:03.479047+00:00 mail postfix/smtpd[835]: warning: restriction `reject_unauthenticated_sender_login_mismatch' ignored: no SASL support
2019-03-07T13:18:03.566241+00:00 mail postfix/smtpd[835]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 554 5.7.1 Service unavailable; Sender address [nikoladadnnqs@cktravelscbe.info] blocked using dbl.spamhaus.org; https://www.spamhaus.org/query/domain/cktravelscbe.info; from=(nikoladadnnqs@cktravelscbe.info) to=(user@mojedomena.cz) proto=ESMTP helo=(mail.mojedomena.cz)
2019-03-07T13:18:03.566479+00:00 mail fetchmail[834]: reading message user@medialine.cz@mail.nejtv.cz:1 of 1 (928 header octets) (log message incomplete)
2019-03-07T13:18:03.566490+00:00 mail fetchmail[834]: SMTP error: 554 5.7.1 Service unavailable; Sender address [nikoladadnnqs@cktravelscbe.info] blocked using dbl.spamhaus.org; https://www.spamhaus.org/query/domain/cktravelscbe.info
2019-03-07T13:18:03.588940+00:00 mail postfix/smtpd[836]: connect from localhost[127.0.0.1]
2019-03-07T13:18:03.590087+00:00 mail rspamd[733]: (fca8c6); proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 47183
2019-03-07T13:18:03.609207+00:00 mail postfix/smtpd[836]: 94A9629E49: client=localhost[127.0.0.1]
2019-03-07T13:18:03.610047+00:00 mail rspamd[733]: (fca8c6); milter; rspamd_milter_process_command: got connection from 127.0.0.1:33616
2019-03-07T13:18:03.612810+00:00 mail fetchmail[834]: mail from MAILER-DAEMON@mail.mojedomena.cz bounced to postmaster
2019-03-07T13:18:03.652892+00:00 mail postfix/cleanup[837]: 94A9629E49: message-id=(20190307131803.94A9629E49@mojedomena.cz)
2019-03-07T13:18:03.654600+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_mime_part_get_cte: detected missing CTE for part as: 7bit
2019-03-07T13:18:03.654635+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_mime_part_get_cte: detected missing CTE for part as: 7bit
2019-03-07T13:18:03.654655+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_mime_part_get_cte: detected missing CTE for part as: 7bit
2019-03-07T13:18:03.654680+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_message_parse: loaded message; id: (20190307131803.94A9629E49@mojedomena.cz); queue-id: (94A9629E49); size: 2426; checksum: (f6c14d40e189e178164b906ac169cf1b)
2019-03-07T13:18:03.654782+00:00 mail rspamd[733]: (fca8c6); lua; settings.lua:358: check for settings
2019-03-07T13:18:03.655332+00:00 mail rspamd[733]: (fca8c6); lua; settings.lua:385: (20190307131803.94A9629E49@mojedomena.cz) apply settings according to rule whitelist
2019-03-07T13:18:03.655362+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_symcache_process_settings: (20190307131803.94A9629E49@mojedomena.cz) is whitelisted
2019-03-07T13:18:03.658026+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_task_write_log: id: (20190307131803.94A9629E49@mojedomena.cz), qid: (94A9629E49), ip: 127.0.0.1, (default: S (no action): [0.00/15.00] []), len: 2426, time: 2.692ms real, 0.966ms virtual, dns req: 0, digest: (f6c14d40e189e178164b906ac169cf1b), mime_rcpts: (postmaster@mojedomena.cz)
2019-03-07T13:18:03.658043+00:00 mail rspamd[733]: (fca8c6); proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 0 regexps matched, 180 regexps total, 0 regexps cached, 0B bytes scanned using pcre, 0B bytes scanned total
2019-03-07T13:18:03.755854+00:00 mail postfix/qmgr[728]: 94A9629E49: from=(), size=2626, nrcpt=1 (queue active)
2019-03-07T13:18:03.757449+00:00 mail postfix/smtpd[836]: disconnect from localhost[127.0.0.1] helo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
2019-03-07T13:18:03.759227+00:00 mail rspamd[733]: (be647d); proxy; proxy_milter_finish_handler: finished milter connection
2019-03-07T13:18:03.761882+00:00 mail postfix/smtpd[835]: warning: restriction `reject_authenticated_sender_login_mismatch' ignored: no SASL support
2019-03-07T13:18:03.761901+00:00 mail postfix/smtpd[835]: warning: restriction `reject_unauthenticated_sender_login_mismatch' ignored: no SASL support
2019-03-07T13:18:03.764378+00:00 mail postfix/smtpd[835]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 554 5.7.1 Service unavailable; Sender address [nikoladadnnqs@cktravelscbe.info] blocked using dbl.spamhaus.org; https://www.spamhaus.org/query/domain/cktravelscbe.info; from=(nikoladadnnqs@cktravelscbe.info) to=(postmaster@localhost) proto=ESMTP helo=(mail.mojedomena.cz)
2019-03-07T13:18:03.764534+00:00 mail fetchmail[834]: can't even send to postmaster!
2019-03-07T13:18:03.765809+00:00 mail fetchmail[834]:  not flushed

Jestli v tom vidíte problém, prosím o radu.

[NN]

Upravil jsi tu konfiguraci podle odkazu? Mimochodem v logu jsou videt nejake dalsi nesrovnalosti:

Server certificate verification error: self signed certificate
...
warning: restriction `reject_authenticated_sender_login_mismatch' ignored: no SASL support
warning: restriction `reject_unauthenticated_sender_login_mismatch' ignored: no SASL support
...

Ta druha by mohla delat problem.

[Pfemir]

Ano, /etc/rspamd/local.d/worker-proxy.inc jsem už měl, takže jsem do něj přidal discard_on_reject = true i quarantine_on_reject = true, ale nemělo žádný vliv (dělal jsem i restart).

Co se týká Server certificate verification error: self signed certificate tak to je nějaký problém s certifikátem mého prividera, kde mám schránku ze které tahám přes fetchmail e-maily.

Co se týká warning: restriction `reject_authenticated_sender_login_mismatch' ignored: no SASL support, tak já SASL nepoužívám. Postfix používám jen na příjem pošty, odesílám přes gmail.

[Pfemir]

Nikdo neví, čím by to mohlo být?

Děkuji.

[Pfemir]

Ještě se dívám jak se to chová třeba na centrum.cz. Tam je to podobné, e-mail se také nestáhne, zůstává na centrumu, ale tady nedostanu, žádný error e-mail.

Výpis logu je následující:

2019-03-11T07:58:01.438498+00:00 mail fetchmail-all[1847]: fetch user for pfemir@mojedomena.cz
2019-03-11T07:58:01.832589+00:00 mail fetchmail[1848]: 1 message for user at imap.centrum.cz.
2019-03-11T07:58:01.906252+00:00 mail postfix/smtpd[1849]: connect from localhost[127.0.0.1]
2019-03-11T07:58:01.907065+00:00 mail rspamd[747]: (55ead5); proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 56603
2019-03-11T07:58:01.926611+00:00 mail postfix/smtpd[1849]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 450 4.1.8 (gizelaqcxnbtedolezal@buckysellscars.fun): Sender address rejected: Domain not found; from=(gizelaqcxnbtedolezal@buckysellscars.fun) to=(pfemir@mojedomena.cz) proto=ESMTP helo=(mail.mojedomena.cz)
2019-03-11T07:58:01.926777+00:00 mail fetchmail[1848]: reading message user@mail-imap-centrumcz.centrum.cz:1 of 1 (2467 header octets) (log message incomplete)
2019-03-11T07:58:01.926786+00:00 mail fetchmail[1848]: SMTP error: 450 4.1.8 (gizelaqcxnbtedolezal@buckysellscars.fun): Sender address rejected: Domain not found
2019-03-11T07:58:01.927964+00:00 mail fetchmail[1848]:  not flushed
2019-03-11T07:58:01.950943+00:00 mail postfix/smtpd[1849]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=0/1 rset=1 quit=1 commands=4/5
2019-03-11T07:58:01.951100+00:00 mail rspamd[747]: (55ead5); milter; rspamd_milter_process_command: got connection from 127.0.0.1:45665
2019-03-11T07:58:01.951126+00:00 mail rspamd[747]: (55ead5); proxy; proxy_milter_finish_handler: finished milter connection

[Pfemir]

Tak jsem nakonec z konfigurace postfixu z smtpd_sender_restrictions vyhodil reject_unknown_sender_domain a reject_rhsbl_sender dbl.spamhaus.org a už to jede.

Tak snad to už bude OK.