[SOLVED] SA score 2/5

[spinx]

Hi,
I have a problem, when i am sending email, just normaln text to ouside it always put SA score=2/5 and i dont know what the problem is. Can some one help me?

 

[Stoiko Ivanov]

Please post the logs for such a mail (they should contain which spamassassin rules hit and cause the 2 points)

 

[spinx]

Hi,
Where can i find logs for spamassassin?
Regards

 

[Stoiko Ivanov]

I meant the mail.logs - you can use the information from the Tracking Center in the GUI
(else the mail.logs are in the files /var/log/mail.log, /var/log/mail.log.1, ...)

 

[spinx]

3012F1600ACD9A8C1DB: SA score=2/5 time=1.138 bayes=undefined autolearn=no autolearn_force=no hits=ALL_TRUSTED(-1),HTML_MESSAGE(0.001),KAM_DMARC_REJECT(3),KAM_DMARC_STATUS(0.01)

 

[Stoiko Ivanov]

KAM_DMARC_REJECT

this rule raises the score by 3 !
I guess this is because you relay the mail from your internal server and PMG does the DKIM signing and you have a DMARC policy which requires DKIM signed mails. Similarly if your DMARC policy has a SPF check and your SPF record only lists PMG's external IP but not the IP of your internal server

In that case you have the following options:
* configure your internal DNS server to reply with a fitting DMARC policy for your internal mails (meaning if you do the DKIM signing on your PMG drop the DKIM signing from your DMARC policy)
* configure your internal DNS server to simply not reply with a DMARC policy for your domain (then PMG won't try to check against the DMARC policy
* assign a score of 0 to the KAM_DMARC_REJECT rule (see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_spamdetector (4.7.3) - keep in mind that you will also disable the rule for inbound rule processing (and a DMARC reject can be quite a good indicator of forged mails)

If it's indeed an issue with outbound mails it could very well be that the issue does not pose problems - since once the mails have been sent out DKIM signed and from the correct IP the DMARC check will also be successful on the receiving server

I hope this explains it...

 

[spinx]

Hi, now i have setup dmrac on my internal DNS. Now it looks like this, is this OK?

3012F1600AD8B25EAF1: SA score=0/5 time=0.360 bayes=undefined autolearn=ham autolearn_force=no hits=ALL_TRUSTED(-1),AWL(1.312),HTML_MESSAGE(0.001),KAM_DMARC_STATUS(0.01)

Regards