Project

General

Profile

Actions

tickets #157246

closed

Mail to opensuse-factory rejected as spam

Added by LarsMB 8 months ago. Updated 4 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Mailing lists
Target version:
-
Start date:
2024-03-14
Due date:
% Done:

0%

Estimated time:

Description

Hi all,

a mail I was trying to send to the factory list bounced with a not quite helpful error message. I've tried resending it twice, including from suse.de rather than suse.com, no change. I'm not entirely sure why it gets flagged as spam.

One of the bounces looks like this:

From: factory-owner@lists.opensuse.org
To: lmb@suse.com
Date: Thu, 14 Mar 2024 11:24:17 +0000
Subject: Re: Zypper crashes while loading shared libraries

[-- Attachment #1 --]
[-- Type: text/plain; charset=utf-8, Encoding: base64, Size: 0.3K --]

Your message to the openSUSE Factory mailing-list was rejected for the following
reasons:

Header "X-Spam: Yes" matched a header rule

The original message as received by Mailman is attached.

[-- Attachment #2 --]
[-- Type: message/rfc822, Encoding: 7bit, Size: 5.3K --]

From: Lars Marowsky-Bree <lmb@suse.com>
To: factory@lists.opensuse.org
Date: Thu, 14 Mar 2024 12:24:04 +0100
Message-ID: <gcwnrfziwhvbujmrxud4qogx2hy36uaslh3dm5rcstx4dg6wbd@mcoy34bvstuh>
Subject: Re: Zypper crashes while loading shared libraries


Related issues 1 (0 open1 closed)

Related to openSUSE admin - tickets #158134: MicroOS snapshot announcements AND mails to admin@opensuse.org being blocked as spamRejected2024-03-27

Actions
Actions #1

Updated by crameleon 8 months ago

Odd. All parts in the chain hint at a successful delivery:

Mar 14 09:13:39 mx1 postsrsd[6819]: srs_forward: <lmb@suse.com> rewritten as <SRS0=5Mz9=KU=suse.com=lmb@opensuse.org>
Mar 14 09:13:39 mx1 postsrsd[6819]: srs_forward: <SRS0=5Mz9=KU=suse.com=lmb@opensuse.org> not rewritten: Valid SRS address for <lmb@su>
Mar 14 09:13:39 mx1 spampd[6745]: processing message <gcwnrfziwhvbujmrxud4qogx2hy36uaslh3dm5rcstx4dg6wbd@mcoy34bvstuh> for <factory@li>
Mar 14 09:13:39 mx1 clamd[2191]: SelfCheck: Database status OK.
Mar 14 09:13:44 mx1 spampd[6745]: clean message <gcwnrfziwhvbujmrxud4qogx2hy36uaslh3dm5rcstx4dg6wbd@mcoy34bvstuh> (1.17/5.01) from <lm>
Mar 14 09:13:44 mx1 postfix/cleanup[6818]: C7DD0110: message-id=<gcwnrfziwhvbujmrxud4qogx2hy36uaslh3dm5rcstx4dg6wbd@mcoy34bvstuh>
Mar 14 09:13:44 mx1 postfix/smtpd[6832]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as C7DD0110; from=<lmb@suse.com> to=<facto>
Mar 14 09:13:44 mx1 postfix/qmgr[2349]: C7DD0110: from=<SRS0=5Mz9=KU=suse.com=lmb@opensuse.org>, size=5905, nrcpt=1 (queue active)
Mar 14 09:13:44 mx1 postfix/smtpd[6891]: disconnect from localhost[::1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 quit=1 commands=6
Mar 14 09:13:44 mx1 postfix/smtpd[6832]: disconnect from unknown[10.150.64.1] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Mar 14 09:13:44 mx1 postfix/smtp[6889]: C7DD0110: to=<factory@lists.opensuse.org>, relay=mailman3.infra.opensuse.org[2a07:de40:b27e:12>
Mar 14 09:13:44 mx1 postfix/qmgr[2349]: C7DD0110: removed

and

Mar 14 09:13:44 mailman3 postfix/smtpd[6914]: connect from mx1.infra.opensuse.org[2a07:de40:b27e:1209::11]
Mar 14 09:13:44 mailman3 postfix/smtpd[6914]: F1F387C3: client=mx1.infra.opensuse.org[2a07:de40:b27e:1209::11]
Mar 14 09:13:44 mailman3 postfix/cleanup[6917]: F1F387C3: message-id=<gcwnrfziwhvbujmrxud4qogx2hy36uaslh3dm5rcstx4dg6wbd@mcoy34bvstuh>
Mar 14 09:13:44 mailman3 postfix/smtpd[6914]: disconnect from mx1.infra.opensuse.org[2a07:de40:b27e:1209::11] ehlo=1 mail=1 rcpt=1 dat>
Mar 14 09:13:44 mailman3 postfix/qmgr[1599]: F1F387C3: from=<SRS0=5Mz9=KU=suse.com=lmb@opensuse.org>, size=6134, nrcpt=1 (queue active)
Mar 14 09:13:45 mailman3 postfix/lmtp[6918]: F1F387C3: to=<factory@lists.opensuse.org>, relay=localhost[::1]:8024, delay=0.05, delays=>
Mar 14 09:13:45 mailman3 postfix/qmgr[1599]: F1F387C3: removed

Unsure where the X-Spam header was set.

Actions #2

Updated by LarsMB 8 months ago

The full spam-related headers from my rejected email are as follows:

Received: from mx1.opensuse.org (localhost [IPv6:::1])
        by mx1.opensuse.org (Postfix) with ESMTP id 086BD4BC0
        for <factory@lists.opensuse.org>; Thu, 14 Mar 2024 11:24:12 +0000
        (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.5 (2021-03-20) on
        mx1.infra.opensuse.org
X-Spam-Level: *
X-Spam-Status: No, score=1.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
        DKIM_VALID_AU,RDNS_NONE,SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE
        autolearn=disabled version=3.4.5
X-Spam-Virus: No
...
X-Spamd-Bar: +++++++++++++++++++++++
Authentication-Results: smtp-out1.suse.de;
        dkim=pass header.d=suse.com header.s=susede1 header.b=dOYCECVO
X-Rspamd-Server: rspamd2.dmz-prg2.suse.org
X-Spamd-Result: default: False [23.39 / 50.00];
        RDNS_NONE(1.00)[];
        SPAMHAUS_XBL(0.00)[2a07:de40:b2bf:2b::102f:from];
        TO_DN_NONE(0.00)[];
        DKIM_TRACE(0.00)[suse.com:+];
        MX_GOOD(-0.01)[];
        HFILTER_HELO_5(3.00)[localhost];
        RCVD_COUNT_ZERO(0.00)[0];
        FROM_EQ_ENVFROM(0.00)[];
        MIME_TRACE(0.00)[0:+];
        ONCE_RECEIVED(1.20)[];
        ARC_NA(0.00)[];
        FAKE_REPLY(1.00)[];
        R_DKIM_ALLOW(-0.20)[suse.com:s=susede1];
        SPAM_FLAG(5.00)[];
        FROM_HAS_DN(0.00)[];
        FROM_HAS_DN(0.00)[];
        TO_MATCH_ENVRCPT_ALL(0.00)[];
        NEURAL_SPAM_SHORT(3.00)[1.000];
        MIME_GOOD(-0.10)[text/plain];
        ONCE_RECEIVED_STRICT(4.00)[];
        RCPT_COUNT_ONE(0.00)[1];
        DWL_DNSWL_LOW(-1.00)[suse.com:dkim];
        DKIM_SIGNED(0.00)[suse.com:s=susede1];
        NEURAL_SPAM_LONG(3.50)[1.000];
        DBL_BLOCKED_OPENRESOLVER(0.00)[suse.com:dkim,suse.com:url];
        FUZZY_BLOCKED(0.00)[rspamd.com];
        MID_RHS_NOT_FQDN(0.50)[];
        HFILTER_HOSTNAME_UNKNOWN(2.50)[];
        GREYLIST(0.00)[pass,meta]
X-Rspamd-Queue-Id: 5DF5621D22
X-Spam: Yes

Uhm. On closer inspection, it looks like ... SUSE's mail relay is qualifying my outbound email as spam? That is ... certainly unexpected.

If this is really the case, sorry for the noise. I'll go have a talk with our own IT team.

Actions #3

Updated by crameleon 8 months ago

That is peculiar indeed.

But what about the email sent from your suse.com address (Google mailserver)?

Actions #4

Updated by crameleon 8 months ago

  • Private changed from Yes to No
Actions #5

Updated by crameleon 8 months ago

  • Related to tickets #158134: MicroOS snapshot announcements AND mails to admin@opensuse.org being blocked as spam added
Actions #6

Updated by crameleon 8 months ago

  • Status changed from New to Feedback
Actions #7

Updated by crameleon 4 months ago

  • Status changed from Feedback to Closed
  • Assignee set to crameleon

No more feedback, closing.

Actions

Also available in: Atom PDF