Gmail emails being blocked by KAM_SEXEMOJI

S

SoldierofRome

Member
Sep 14, 2022
6
0
6
Hi All,

Any help will be appreciated with this.

Some Gmail emails are getting reported as SPAM due to them getting over a Spam detection results of 3; what seems to be causing this is a SPAM detection of 9.5 by KAM_SEXEMOJI. It reports this is due to "Sexually Explicit Email Using Emojis". I will past the full report below:

X-SPAM-LEVEL: Spam detection results: 3
AWL -4.569 Adjusted score from AWL reputation of From: address
BAYES_00 -1.9 Bayes spam probability is 0 to 1%
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_ENVFROM_END_DIGIT 0.25 Envelope-from freemail username ends in digit
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
HTML_MESSAGE 0.001 HTML included in message
KAM_SEXEMOJI 9.5 Sexually Explicit Email Using Emojis
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2 -0.001 Average reputation (+2)
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record



After some searching on Google I cannot find out what exactly is KAM_SEXEMOJI, nor anyone else having this issue.
Just to clarify the emails being sent don't have any emojis in them, all that is written in email is Test email.

Thankyou in advance for the help and let me know if anymore info is needed.
 
can you post the raw email?

looking in my local config here (KAM.cf in /var/lib/spamassassin/3.004006/kam_sa-channels_mcgrail_com) it matches the following things:

Code: 
#EMOJISEX
body            __KAM_SEXEMOJI1         /\d (year|yrs)/i
body            __KAM_SEXEMOJI2         /ready 4fun/i
body            __KAM_SEXEMOJI3         /divorced mom/i
body            __KAM_SEXEMOJI4         /\x{F0}\x{9F}\x{8D}\x{91}/i
uri             __KAM_SEXEMOJI5         /\.ga\//i

meta            KAM_SEXEMOJI            ( FREEMAIL_FROM + __KAM_SEXEMOJI1 + __KAM_SEXEMOJI2 + __KAM_SEXEMOJI3 + __KAM_SEXEMOJI4 +  __KAM_SEXEMOJI5 >= 6)
describe        KAM_SEXEMOJI            Sexually Explicit Email Using Emojis
score           KAM_SEXEMOJI            9.5
(the emoji part is the 'peach' emoji)
 
dcsapak said:
can you post the raw email?
Click to expand...
hi, here is:
Delivered-To: receiver@domain.ltd
Return-Path: sender@mail.ru
Received-SPF: pass (mail.ru ... _spf.mail.ru: 45.84.128.13 is authorized to use 'sender@mail.ru' in 'mfrom' identity (mechanism 'ip4:45.84.128.0/23' matched)) receiver=pmg.domain.ltd; identity=mailfrom; envelope-from="sender@mail.ru"; helo=f116.i.mail.ru; client-ip=45.84.128.13
Received: from f116.i.mail.ru (f116.i.mail.ru [45.84.128.13])
by pmg.domain.ltd (Proxmox) with ESMTPS id 328734132E
for <receiver@domain.ltd>; Tue, 17 Jan 2023 18:27:29 +1000 (+10)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mail.ru; s=mail4;
h=References:In-Reply-To:Content-Type:Message-ID:Reply-To:Date:MIME-Version:Subject:Cc:To:From:From:Subject:Content-Type:Content-Transfer-Encoding:To:Cc; bh=Crd31e/sm3patY7zBJJHwfsCyHJ0fRE4TovkfaClrJw=;
t=1673944049;x=1674034049;
b=agqU/p+7Zgy8aJmEVyNkkaAYTutA3loAWti6gDbeqrQNtM7hO9ddVkM/gPqhx02YpOCB4UhWX/PnyGVDYIHEDgyHxlwimecCfAwo9JdaB3cJ1CwEJrhzYvSxjVIWE1dmYiX+1Wtqk5nluM21/6hV2kdml+XJLuQDd+HlZyiqSqj3iaePraH1Xtmvpy24ARHwAqS00J50lZ6GQBtfl/0dh33I6ZTXlqT19cahQsXN941OK5GZ+YO1ihAQKmRAVGB/OafHUi2Ta1IBoIIFmY56jI2BSHSatvmsnszFAxSfPseFiFmq4WlypfIlTPMeUOnDqPBkyFgQ3s7sbVArlxyClg==;
Received: by f116.i.mail.ru with local (envelope-from <sender@mail.ru>)
id 1pHhJP-0004YL-Gg; Tue, 17 Jan 2023 11:27:19 +0300
Received: by e.mail.ru with HTTP;
Tue, 17 Jan 2023 11:27:19 +0300
From: =?UTF-8?B?0J3QsNGC0LDQu9GM0Y8gINCU0L7QvdGB0LrQsNGP?= <sender@mail.ru>
To: =?UTF-8?B?VmxhZGltaXIgUG9wb3Y=?= <pop@tflog.ru>
Cc: =?UTF-8?B?RG1pdHJ5?= <sender@mail.ru>,
=?UTF-8?B?0KbQsNCz0L7QudC60L4g0KHQstC10YLQu9Cw0L3QsCDQkNC70LXQutGB0LA=?=
=?UTF-8?B?0L3QtNGA0L7QstC90LA=?= <receiver@domain.ltd>
subject: SPAM: Re: =?UTF-8?Q?=D0=B0=D1=80=D0=B5=D0=BD=D0=B4=D0=B0=20?= =?UTF-8?Q?=D0=A2=D0=A4=D0=9B=20?= =?UTF-8?Q?=D0=9B=D0=BE=D0=B3=D0=B8=D1=81=D1=82=D0=B8=D0=BA=D0=B0=20?= =?UTF-8?Q?=D0=BD=D0=BE=D1=8F=D0=B1=D1=80=D1=8C?=
MIME-Version: 1.0
X-Mailer: Mail.Ru Mailer 1.0
X-SenderField-ReMsg: 16739435921774769163
X-SenderField-Remind: 0
Date: Tue, 17 Jan 2023 11:27:19 +0300
Reply-To: =?UTF-8?B?0J3QsNGC0LDQu9GM0Y8gINCU0L7QvdGB0LrQsNGP?= <sender@mail.ru>
X-Priority: 3 (Normal)
Message-ID: <1673944039.341378192@f116.i.mail.ru>
Content-Type: multipart/alternative;
boundary="--ALT--924e5E05572756c477c79eB6a88120421673944039"
In-Reply-To: <dc097fdf-fb87-f65b-668c-208f7740927d@tflog.ru>
References: <0fa980bc-3620-c1cc-6eb4-e9b75fc52c95@tflog.ru>
<bdcfa4e34c974622b8e0b01bc5ba7292@domain.ltd>
<dc097fdf-fb87-f65b-668c-208f7740927d@tflog.ru>
Authentication-Results: f116.i.mail.ru; auth=pass smtp.auth=sender@mail.ru smtp.mailfrom=sender@mail.ru
X-4EC0790: 10
X-7564579A: 646B95376F6C166E
X-77F55803: 119C1F4DF6A9251CE08A42DC40067741508C70872D4B012D8E00A5F08E3257088FD872164937FA4C4E1319B6C93F0EF0C376AE7F443067A458609A7867A16BB87AC84ECC76C98E05
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
X-C8649E89: 4E36BF7865823D7055A7F0CF078B5EC49A30900B95165D34A2EC120135420F9066A143B494419971BA4CD03EB11B1C37291CC10F58448B622224215F521DBB491D7E09C32AA3244CEEE8802FEA023D4A06AD03881C7509137C0C08F7987826B9FACE5A9C96DEB163
X-D57D3AED: 3ZO7eAau8CL7WIMRKs4sN3D3tLDjz0dLbV79QFUyzQ2Ujvy7cMT6pYYqY16iZVKkSc3dCLJ7zSJH7+u4VD18S7Vl4ZUrpaVfd2+vE6kuoey4m4VkSEu530nj6fImhcD4MUrOEAnl0W826KZ9Q+tr5+wYjsrrSY/u8Y3PrTqANeitKFiSd6Yd7yPpbiiZ/d5BsxIjK0jGQgCHUM3Ry2Lt2G3MDkMauH3h0dBdQGj+BB/iPzQYh7XS329fgu+/vnDhL7BLTN1OJFXDuVBzbgTUqQ==
X-Mailru-MI: 400800
X-Mailru-Sender: 53CB6EFC032790A13E63A2080D3EEDB0B60ACBD9885858DBC376AE7F443067A444DA36E92D2E4DF9DCB4F9323E0A9D4E6799F1337D3842D78B742688D0A61EC102DB81B281332CC1C73E403346BAF74BE113D814D87B26DB22B820C1B2086D890DA7A0AF5A3A8387
X-Mras: Ok
X-Spam: undefined
X-SPAM-LEVEL: Spam detection results: 3
AWL -5.463 Adjusted score from AWL reputation of From: address
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
HTML_MESSAGE 0.001 HTML included in message
KAM_SEXEMOJI 9.5 Sexually Explicit Email Using Emojis
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust
RCVD_IN_ZEN_BLOCKED_OPENDNS 0.001 ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/
SPF_HELO_PASS -0.001 SPF: HELO matches SPF record
SPF_PASS -0.001 SPF: sender matches SPF record



----ALT--924e5E05572756c477c79eB6a88120421673944039
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64

CtCS0LvQsNC00LjQvNC40YAgLCDQv9C40YHRjNC80L7CoCDQktCw0Lwg0L7RgtC/0YDQsNCy0LjQ
u9CwICzCoCDQsNC60YLRi8KgINCy0YHQtcKgINC/0YDQvtC00YPQsdC70LjRgNC+0LLQsNC70LAs
INC00LXQutCw0LHRgNGMwqAg0LTQvtCx0LDQstC40LvQsMKgINC+0LTQuNC9wqAg0LrQvtC90YLQ
tdC50L3QtdGAwqAg0YPCoMKgINCS0JMgLiDQn9C+0LvRg9GH0LjQu9C4ID/CoArCoArCoArQoSDR
g9Cy0LDQttC10L3QuNC10LwsINCU0L7QvdGB0LrQsNGPwqAg0J3QsNGC0LDQu9GM0Y/CoArRgtC1
0LsuODkwMjUyNDA0MTcKwqAKwqA=

----ALT--924e5E05572756c477c79eB6a88120421673944039
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
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==

----ALT--924e5E05572756c477c79eB6a88120421673944039--
 
Last edited:
Hi dcsapak,

Here is my RAW email as well. If it helps at all it seems to only be happening to Gmail and Outlook/Hotmail senders.

Delivered-To: receiver@domain.com.au

Return-Path: sender@domain.com.au

Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use 'sender@domain.com.au' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=pmg1.relaydomain.com.au; identity=mailfrom; envelope-from="sender@domain.com.au"; helo=mail-lf1-f51.google.com; client-ip=***.***.***.***

Received: from mail-lf1-f51.google.com (mail-lf1-f51.google.com [209.85.167.51])

by pmg1.relaydomain.com.au (Proxmox) with ESMTPS id AA95F448FB

for <receiver@domain.com.au>; Tue, 17 Jan 2023 10:57:46 +1100 (AEDT)

Received: by mail-lf1-f51.google.com with SMTP id a11so4664143lfg.0

for <receiver@domain.com.au>; Mon, 16 Jan 2023 15:57:46 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=noLRZVqfnDrFz9ORUSS2V1nRcvrAqMJDfWBlllhdWVg=;

b=Z7TcUjXO6RFefEZslLhbzmiR3T3FFBBbMGvAs0e1gPIBS9hnsFmVh5ukQjkACgIIKv

5BWs6A5fU0o+po3T+PB3bdoUIxbGWNpbPRHiJY7aF6hVACllGx4fGd4FfE9WG/1Gxz2M

LcZlFFnOBLylsJG6SPZwZLC1ixukzmiZY6RIsoZAa+9FaoUZul7i5zQt/cGcb3HzbpLY

t+aN7zgl0RWokFAoOCE9FbYu+t24/nhnp52llPlArT7ZaX5l8jLGJd2SVog9n17ezA3G

AF2ilKnsqzFtTNk8QcZdY74jfqON3GgDncos1EevA5Z8OlSMWNMBQlh/IbGYwPgPXmsE

7moQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=noLRZVqfnDrFz9ORUSS2V1nRcvrAqMJDfWBlllhdWVg=;

b=eKZ5HgPZfXjGDBAwQiEJhOaQbOr+7aeVffShZIx5corajXX5hxXQdgeEWZU1gBbMxM

Pk96HMfmLD7Fklm8JEFssd85GX/srKJYdogHHMy6lW9DUYd8xEgQUrFtNX1w0kStkSpp

1zZXKrZCfQ1kZe1o0Q1NJELGenBXTQogbX4JHky5HldKAVQkHWV1zKBCj5AyT53aQR6z

J/YNeY7rjUViYSLeWmCT0Mi8Civ10wYBNt3VQj/rW3OcUWvGa/yVk7HNc+YQg6Ayb3Qu

TXBjwG61H5V7RiTFVQwa/QGFL37ugsFY6LPrm9kGH26oRNvAdE8nYen5ewfb9Qg41EIh

ZBZA==

X-Gm-Message-State: AFqh2kqrT3FxAecvOLu0gVg8A5vlc5fUEHoRqmsbRwZhgY7R0G8mey43

r7YH4GzS9W1PYlrSvkujXfpTJSjQcsVjhkWINbUTf/7r

X-Google-Smtp-Source: AMrXdXt7ihJaAkYiEddoKCoxsrBhUFSNRkk2/BGB/ZJRjrF8yUC2fqm4McXg6o5kAZiuIrS4ismrFQi3C2M3Vsy7F/g=

X-Received: by 2002:ac2:5966:0:b0:4d5:4611:b6b2 with SMTP id

h6-20020ac25966000000b004d54611b6b2mr82931lfp.319.1673913456936; Mon, 16 Jan

2023 15:57:36 -0800 (PST)

MIME-Version: 1.0

From: Sender Name <sender@domain.com.au>

Date: Tue, 17 Jan 2023 10:56:29 +1100

Message-ID: <CAJH9bet+UR7L-QAi+ZqAEtHkziL8BtJfdx8sbbZXp3ssWELqww@mail.gmail.com>

subject: SPAM: Test

To: receiver@domain.com.au

Content-Type: multipart/alternative; boundary="000000000000fc4b2a05f26a58a4"

X-SPAM-LEVEL: Spam detection results: 3

AWL -4.569 Adjusted score from AWL reputation of From: address

BAYES_00 -1.9 Bayes spam probability is 0 to 1%

DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid

DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature

DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain

DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain

FREEMAIL_ENVFROM_END_DIGIT 0.25 Envelope-from freemail username ends in digit

FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider

HTML_MESSAGE 0.001 HTML included in message

KAM_SEXEMOJI 9.5 Sexually Explicit Email Using Emojis

RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust

RCVD_IN_MSPIKE_H2 -0.001 Average reputation (+2)

SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record

SPF_PASS -0.001 SPF: sender matches SPF record





--000000000000fc4b2a05f26a58a4

Content-Type: text/plain; charset="UTF-8"



Test email



--000000000000fc4b2a05f26a58a4

Content-Type: text/html; charset="UTF-8"



<div dir="ltr">Test email</div>



--000000000000fc4b2a05f26a58a4--
 
did any of you manually override the spamassin values (e.g. via the Custom Scores in the gui? especially the 'FREEMAIL_FROM' ?)
 
dcsapak said:
did any of you manually override the spamassin values (e.g. via the Custom Scores in the gui? especially the 'FREEMAIL_FROM' ?)
Click to expand...
Hi dcsapak,

As far as I am aware no, but there are a few members of our team that have access to the mail gateway. I assume the custom scores is the screenshot I have attached; in which case no we haven't added anything manually.
 

Attachments

  • Custom Scores.png
    Custom Scores.png
    44.3 KB · Views: 6
mhmm.. can you check the KAM.cf file in /var/lib/spamassassin for that and check if it's the same as mine posted above?
 
dcsapak said:
mhmm.. can you check the KAM.cf file in /var/lib/spamassassin for that and check if it's the same as mine posted above?
Click to expand...
Code: 
#EMOJISEX
  #AGE
body            __KAM_SEXEMOJI1         /\d (year|yrs)/i
  #ASK
body            __KAM_SEXEMOJI2         /ready 4fun|lets fun|private cam/i
  #MOM
body            __KAM_SEXEMOJI3         /divorced mom/i
  #EMOJI
body            __KAM_SEXEMOJI4         /\x{F0}\x{9F}\x{8D}\x{91}|\x{F0}\x{9F}\x{92}\x{8B}/i
  #URL
uri             __KAM_SEXEMOJI5         /\.ga\//i

meta            KAM_SEXEMOJI            ( FREEMAIL_FROM >=1 ) && (__KAM_SEXEMOJI1 + __KAM_SEXEMOJI2 + __KAM_SEXEMOJI3 + __KAM_SEXEMOJI4 +  __KAM_SEXEMOJI5 >= 4)
describe        KAM_SEXEMOJI            Sexually Explicit Email Using Emojis
score           KAM_SEXEMOJI            9.5
 
dcsapak said:
mhmm.. can you check the KAM.cf file in /var/lib/spamassassin for that and check if it's the same as mine posted above?
Click to expand...
Here is my KAM.cf file but I found mine was actually located in: /var/lib/spamassassin/3.004006/kam_sa-channels_mcgrail_com

Code: 
#EMOJISEX
  #AGE
body            __KAM_SEXEMOJI1         /\d (year|yrs)/i
  #ASK
body            __KAM_SEXEMOJI2         /ready 4fun|lets fun|private cam/i
  #MOM
body            __KAM_SEXEMOJI3         /divorced mom/i
  #EMOJI
body            __KAM_SEXEMOJI4         /\x{F0}\x{9F}\x{8D}\x{91}|\x{F0}\x{9F}\x{92}\x{8B}/i
  #URL
uri             __KAM_SEXEMOJI5         /\.ga\//i

meta            KAM_SEXEMOJI            ( FREEMAIL_FROM >=1 ) && (__KAM_SEXEMOJI1 + __KAM_SEXEMOJI2 + __KAM_SEXEMOJI3 + __KAM_SEXEMOJI4 +  __KAM_SEXEMOJI5 >= 4)
describe        KAM_SEXEMOJI            Sexually Explicit Email Using Emojis
score           KAM_SEXEMOJI            9.5
 
Last edited:
dcsapak said:
mhmm.. can you check the KAM.cf file in /var/lib/spamassassin for that and check if it's the same as mine posted above?
Click to expand...
Hi dcsapak,
Any ideas about this one? Should I change the KAM.cf file to match yours?

Reference my post from last week to see what my KAM.cf file currently looks like.
 
looking at the configs you posted, it still should be fine... (it needs FREEMAIL_FROM and at least 4 of 5 markers it defines.. no idea why that should trigger falsely)
 
dcsapak said:
looking at the configs you posted, it still should be fine... (it needs FREEMAIL_FROM and at least 4 of 5 markers it defines.. no idea why that should trigger falsely)
Click to expand...
Hi dcsapak,

Weirdly enough looks like it has resolved itself over the last week; no more false positives or even any emails getting detected by the KAM_SEXEMOJI.

I'll monitor it over the next couple weeks.

Thankyou for the help with everything, very much appreciated.
 
You must log in or register to reply here.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Quick Navigation

Home Get Subscription Wiki Downloads Proxmox Customer Portal About

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!
Community platform by XenForo® © 2010-2024 XenForo Ltd.
Top Bottom