Set Score from a country

[Emanuel Gonzalez]

I'm receiving spam email from France. Is it possible to assign a specific score?

X-Spam-Score: 2.4
X-Spam-Score-Int: 23
X-Spam-Bar: ++
X-Spam-Report: Action: no action
 Symbol: URIBL_BLOCKED(0.00)
 Symbol: TO_DN_NONE(0.00)
 Symbol: MIME_HTML_ONLY(0.20)
 Symbol: RCVD_TLS_ALL(0.00)
 Symbol: FROM_EQ_ENVFROM(0.00)
 Symbol: ARC_NA(0.00)
 Symbol: COUNTRY_SPAMMER(3.00)
 Symbol: FROM_HAS_DN(0.00)
 Symbol: RCPT_COUNT_ONE(0.00)
 Symbol: HAS_REPLYTO(0.00)
 Symbol: BAYES_HAM(-3.00)
 Symbol: R_DKIM_NA(0.00)
 Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
 Symbol: R_SPF_ALLOW(-0.20)
 Symbol: RCVD_COUNT_TWO(0.00)
 Symbol: REPLYTO_ADDR_EQ_FROM(0.00)
 Symbol: DMARC_NA(0.00)
 Symbol: MID_RHS_NOT_FQDN(0.50)
 Symbol: NEURAL_SPAM(0.00)
 Symbol: HAS_PHPMAILER_SIG(0.00)
 Symbol: ASN(0.00)
 Symbol: RCVD_VIA_SMTP_AUTH(0.00)
 Symbol: SUBJECT_ENDS_QUESTION(1.00)
 Symbol: MX_INVALID(1.00)
 Symbol: IP_SCORE(-0.15)

 Message: (SPF): spf allow

rspamd does not recognize mail as spam.

Is it possible to assign a score to all IPs from France?

[Alex JOST]

rspamd thinks this message contains no spam. Why not train the bayes engine?

--
Alex JOST

[Alexander Moisseev]

On 5/24/2018 10:24 AM, Alex JOST wrote:
> Am 23.05.2018 um 20:31 schrieb Emanuel Gonzalez:
>> I'm receiving spam email from France. Is it possible to assign a specific
>> score?
>>
>>

>>   Symbol: BAYES_HAM(-3.00)

>>
>> rspamd does not recognize mail as spam.
>>
>> Is it possible to assign a score to all IPs from France?
>>
>
> rspamd thinks this message contains no spam. Why not train the bayes engine?
>

Emanuel,
I'd follow Alex's suggestion, but if you really think you need to assign a score to some country, you can use the type "country" in the multimap module.
https://rspamd.com/doc/modules/multimap.html

[Toxa]

On Wednesday, 23 May 2018 20:31:57 UTC+2, Emanuel Gonzalez wrote:

I'm receiving spam email from France. Is it possible to assign a specific score?

$ cat local.d/multimap.conf

MY_COUNTRY_BANNED {
  type = "country";
  map = "file:///etc/rspamd/maps/countries_banned.map";
  description = "IP in a banned country";
  score = 8.0;
}

MY_COUNTRY_SUSP {
  type = "country";
  map = "file:///etc/rspamd/maps/countries_suspictious.map";
  description = "IP in a suspictious country";
  score = 3.5;
}