Hi, I have problems with some mails from opensuse-factory@opensuse.org and opensuse@opensuse.org failing into spam. For example from yesterday from Michael Ströder (13:13) Re: [opensuse- factory] Friendly warning: Python 2 is going to be removed from Factory on 2020-01-02 X-Spamd-Bar: ++++++ X-Spam-Level: ****** X-Rspamd-Server: kikimora.laddobar.cz X-Spam-Status: Yes, score=6.85 X-Spamd-Result: default: False [6.85 / 9.00]; GREYLIST(0.00)[pass,meta]; HAS_ATTACHMENT(0.00)[]; NEURAL_SPAM(0.00)[0.593,0]; MX_GOOD(-0.50)[cached: mx1.suse.de]; FORGED_SENDER(0.30)[michael@stroeder.com,opensuse- factory@opensuse.org]; RCVD_IN_DNSWL_FAIL(0.00) [15.220.135.195.list.dnswl.org:query refused]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:29298, ipnet:195.135.220.0/22, country:DE]; BAYES_HAM(-1.81)[93.89%]; TAGGED_FROM(0.00)[bounces-89961- vojtech.zeisek=opensuse.org]; FORGED_RECIPIENTS(2.00)[opensuse- factory@opensuse.org,vojta@trapa.cz]; ARC_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00) [michael@stroeder.com,opensuse-factory@opensuse.org]; FROM_HAS_DN(0.00)[]; SIGNED_SMIME(-2.00)[]; MID_RHS_MATCH_FROM(0.00)[]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; DMARC_NA(0.00)[stroeder.com]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; AUTH_NA(1.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~,3:+]; TO_DN_EQ_ADDR_ALL(0.00)[]; R_SPF_NA(0.00) []; BROKEN_HEADERS(10.00)[]; RCVD_COUNT_SEVEN(0.00)[8]; IP_SCORE(-1.93)[ip: (-5.16), ipnet: 195.135.220.0/22(-2.53), asn: 29298(-2.03), country: DE(0.07)] X-Rspamd-Queue-Id: C3F1660988FB X-Spam-Flag: YES X-Spam: Yes This mails also has invalid signature. Or from today from Mathias Homann (7:49) *** SPAM *** Re: [opensuse] How do I interpret this router advert? X-Spamd-Bar: +++++++ X-Spam-Level: ******* X-Rspamd-Server: kikimora.laddobar.cz X-Spam-Status: Yes, score=7.20 X-Spamd-Result: default: False [7.20 / 9.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; GREYLIST(0.00)[pass,body]; TO_DN_NONE(0.00)[]; NEURAL_SPAM(0.00)[0.883,0]; MX_GOOD(-0.50)[cached: mx1.suse.de]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30) [Mathias.Homann@opensuse.org,opensuse@opensuse.org]; RCVD_IN_DNSWL_FAIL(0.00) [2.220.135.195.list.dnswl.org:query refused]; MIME_TRACE(0.00)[0:+,1:+,2:~,3: +]; R_DKIM_NA(0.00)[]; FORGED_RECIPIENTS(2.00) [opensuse@opensuse.org,vojta@trapa.cz]; FROM_NEQ_ENVFROM(0.00) [Mathias.Homann@opensuse.org,opensuse@opensuse.org]; HAS_X_AS(0.00)[]; ASN(0.00)[asn:29298, ipnet:195.135.220.0/22, country:DE]; ARC_NA(0.00)[]; TO_DOM_EQ_FROM_DOM(0.00)[]; TAGGED_FROM(0.00)[bounces-216650- vojtech.zeisek=opensuse.org]; FROM_HAS_DN(0.00)[]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; SUBJECT_ENDS_QUESTION(1.00)[]; DMARC_NA(0.00)[opensuse.org]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00) [1]; AUTH_NA(1.00)[]; RCVD_TLS_LAST(0.00)[]; BAYES_HAM(-3.00)[100.00%]; R_SPF_NA(0.00)[]; MID_RHS_NOT_FQDN(0.50)[]; BROKEN_HEADERS(10.00)[]; RCVD_COUNT_SEVEN(0.00)[10]; IP_SCORE(-1.89)[ip: (-4.94), ipnet: 195.135.220.0/22(-2.53), asn: 29298(-2.03), country: DE(0.07)] X-Rspamd-Queue-Id: 5D3626959202 X-Spam-Flag: YES Very often, mails with signatures are affected. Common case in past few days were mails by Carlos, e.g. from Friday 22:04 *** SPAM *** Re: [opensuse] Permission problem - I need another pair of eyes. X-Spamd-Bar: ++++++++ X-Spam-Level: ******** X-Rspamd-Server: kikimora.laddobar.cz X-Spam-Status: Yes, score=8.79 X-Spamd-Result: default: False [8.79 / 9.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_REJECT(1.00)[gmx.net:s=badeba3b8450]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.50) [cached: mx1.suse.de]; DKIM_TRACE(0.00)[gmx.net:-]; CTYPE_MIXED_BOGUS(1.00)[]; FORGED_SENDER(0.30)[robin.listas@gmx.es,opensuse@opensuse.org]; RCVD_IN_DNSWL_FAIL(0.00)[2.220.135.195.list.dnswl.org:query refused]; MIME_TRACE(0.00)[0:+,1:+,2:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:29298, ipnet:195.135.220.0/22, country:DE]; BAYES_HAM(-3.00)[100.00%]; TAGGED_FROM(0.00)[bounces-216572-vojtech.zeisek=opensuse.org]; FORGED_RECIPIENTS(2.00)[opensuse@opensuse.org,vojta@trapa.cz]; ARC_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00)[robin.listas@gmx.es,opensuse@opensuse.org]; FROM_HAS_DN(0.00)[]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.10)[multipart/ mixed,text/plain]; DMARC_NA(0.00)[gmx.es]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-1.90)[ip: (-4.97), ipnet: 195.135.220.0/22(-2.55), asn: 29298(-2.04), country: DE(0.07)]; R_SPF_NA(0.00) []; BROKEN_HEADERS(10.00)[]; RCVD_COUNT_SEVEN(0.00)[10]; GREYLIST(0.00) [pass,body] X-Rspamd-Queue-Id: D3FF1602E33B X-Spam-Flag: YES But even from Dominique Leuenberger / DimStar (Monday, 14:34) *** SPAM *** Re: [opensuse-factory] Friendly warning: Python 2 is going to be removed from Factory on 2020-01-02 X-Spamd-Bar: ++++++++ X-Spam-Level: ******** X-Rspamd-Server: kikimora.laddobar.cz X-Spam-Status: Yes, score=8.29 X-Spamd-Result: default: False [8.29 / 9.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; GREYLIST(0.00)[pass,meta]; TO_DN_NONE(0.00)[]; NEURAL_SPAM(0.00)[0.758,0]; MX_GOOD(-0.50)[cached: mx1.suse.de]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30) [dimstar@opensuse.org,opensuse-factory@opensuse.org]; RCVD_IN_DNSWL_FAIL(0.00) [2.220.135.195.list.dnswl.org:query refused]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; FORGED_RECIPIENTS(2.00)[opensuse- factory@opensuse.org,vojta@trapa.cz]; ASN(0.00)[asn:29298, ipnet: 195.135.220.0/22, country:DE]; TAGGED_FROM(0.00)[bounces-89935- vojtech.zeisek=opensuse.org]; TO_DOM_EQ_FROM_DOM(0.00)[]; ARC_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00)[dimstar@opensuse.org,opensuse-factory@opensuse.org]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; DMARC_NA(0.00)[opensuse.org]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; AUTH_NA(1.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~,3:+]; BAYES_HAM(-0.41)[77.88%]; R_SPF_NA(0.00)[]; BROKEN_HEADERS(10.00)[]; RCVD_COUNT_SEVEN(0.00)[9]; IP_SCORE(-1.89)[ip: (-4.95), ipnet: 195.135.220.0/22(-2.54), asn: 29298(-2.03), country: DE(0.07)] X-Rspamd-Queue-Id: 86BBA6959205 X-Spam-Flag: YES or from Matěj Cepl (yesterday, 8:42) *** SPAM *** Re: [opensuse-factory] Friendly warning: Python 2 is going to be removed from Factory on 2020-01-02 X-Spamd-Bar: ++++++++ X-Spam-Level: ******** X-Rspamd-Server: kikimora.laddobar.cz X-Spam-Status: Yes, score=8.68 X-Spamd-Result: default: False [8.68 / 9.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_SPAM(0.00)[0.646,0]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.50)[cached: mx1.suse.de]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30) [mcepl@cepl.eu,opensuse-factory@opensuse.org]; RCVD_IN_DNSWL_FAIL(0.00) [2.220.135.195.list.dnswl.org:query refused]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:29298, ipnet:195.135.220.0/22, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; TAGGED_FROM(0.00)[bounces-89957- vojtech.zeisek=opensuse.org]; FORGED_RECIPIENTS(2.00)[opensuse- factory@opensuse.org,vojta@trapa.cz]; ARC_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00) [mcepl@cepl.eu,opensuse-factory@opensuse.org]; FROM_HAS_DN(0.00)[]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; MIME_TRACE(0.00)[0:+,1:+,2:~,3:+]; DMARC_NA(0.00)[cepl.eu]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; AUTH_NA(1.00)[]; IP_SCORE(-1.89)[ip: (-4.94), ipnet: 195.135.220.0/22(-2.53), asn: 29298(-2.03), country: DE(0.07)]; BAYES_HAM(-0.03)[55.15%]; R_SPF_NA(0.00)[]; BROKEN_HEADERS(10.00)[]; RCVD_COUNT_SEVEN(0.00)[7]; GREYLIST(0.00)[pass,meta] X-Rspamd-Queue-Id: BB4706959185 X-Spam-Flag: YES And more... As You can see, mails are forwarded to my inbox vojta at trapa dot cz hosted on kikimora.laddobar.cz. I'm not sure where the problem starts. When composing mail by senders? On the conference mail server? On my mail server? In my KMail? How to fix it? -- Vojtěch Zeisek Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/ https://trapa.cz/