understanding greylisting

[Thomas Stein]

Hello.

I have a problem understanding how greylisting works in rspamd. There is this setting in exim:

 

defer message    = Please try again later
            condition  = ${if eq{$spam_action}{soft reject}}

So if "soft reject" is reached the mail gets greylisted according to greylist.conf:

greylist {
  # Search "example.com" and "mail.example.com" for "mx.out.mail.example.com":
  whitelist_domains_url = [
    "$LOCAL_CONFDIR/local.d/greylist-whitelist-domains.inc",
  ];

  expire = 1d; # 1 day by default
  timeout = 5min; # 5 minutes by default
  key_prefix = "rg"; # default hash name
  max_data_len = 10k; # default data limit to hash
  message = "Try again later"; # default greylisted message
  #symbol = "GREYLIST"; # Symbol to insert
  action = "soft reject"; # default greylisted action
  ipv4_mask = 19; # Mask bits for ipv4
  ipv6_mask = 64; # Mask bits for ipv6

Is that right? I'm asking because a greylitsed mail never revcovers from being greylisted. Also i ask myself
why is it saying "soft reject" and in the WebGui there is "greylist" shown? Is there a reason for that?

My last question is for the WebUI. Is it possible to show the sender address instead of the message id on the history page?

thanks and cheers
t.

[Andrew Lewis]

Hi Thomas,

> defer message = Please try again later
> condition = ${if eq{$spam_action}{soft reject}}

Means if Rspamd suggests "soft reject" action for whatever reason
(greylisting, ratelimits, ...) - Exim obliges by temporarily rejecting
the message.

> Is that right? I'm asking because a greylitsed mail never revcovers from
> being greylisted. Also i ask myself
> why is it saying "soft reject" and in the WebGui there is "greylist" shown?
> Is there a reason for that?

If you have "greylist" action being returned in scan results probably
greylist module is not active. Have you configured Redis?
https://rspamd.com/doc/configuration/redis.html

> My last question is for the WebUI. Is it possible to show the sender
> address instead of the message id on the history page?

Redis history shows sender addresses:
https://rspamd.com/doc/modules/history_redis.html

Best,
-AL.

[Thomas Stein]

Am Dienstag, 9. Mai 2017 14:28:29 UTC+2 schrieb Andrew Lewis:

Hi Thomas,

> defer message    = Please try again later
>             condition  = ${if eq{$spam_action}{soft reject}}

Means if Rspamd suggests "soft reject" action for whatever reason  
(greylisting, ratelimits, ...) - Exim obliges by temporarily rejecting  
the message.

> Is that right? I'm asking because a greylitsed mail never revcovers from
> being greylisted. Also i ask myself
> why is it saying "soft reject" and in the WebGui there is "greylist" shown?
> Is there a reason for that?

If you have "greylist" action being returned in scan results probably  
greylist module is not active. Have you configured Redis?  
https://rspamd.com/doc/configuration/redis.html

Yes. Redis is configured. But i guess I skrewed to much around with the configfiles. I will read a bit more before i post further questions.
 

> My last question is for the WebUI. Is it possible to show the sender
> address instead of the message id on the history page?

Redis history shows sender addresses:  
https://rspamd.com/doc/modules/history_redis.html

Nice. From *and* To is now shown.

thanks
t.
 

Best,
-AL.