I have a server in production with Carbonio 24.1.0, it receives emails from external domains without problems, but emails from the same domain arrive in the Spam folder.
Return-Path: <soporte@tpg-automotive.com>
Received: from mta.tpg-automotive.com (LHLO mta.tpg-automotive.com)
(5.189.158.54) by mta.tpg-automotive.com with LMTP; Fri, 12 Apr 2024
01:03:24 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mta.tpg-automotive.com (Postfix) with ESMTP id 121284C81DE
for <fquivera@tpg-automotive.com>; Fri, 12 Apr 2024 01:03:24 +0200 (CEST)
X-Spam-Flag: YES
X-Spam-Score: 4.176
X-Spam-Level: ****
X-Spam-Status: Yes, score=4.176 required=3.2 tests=[ALL_TRUSTED=-1,
DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
HELO_NO_DOMAIN=0.542, HTML_MESSAGE=0.001, RCVD_IN_PBL=3.558, RDNS_NONE=1.274,
URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: mta.tpg-automotive.com (amavis);
dkim=pass (2048-bit key) header.d=tpg-automotive.com
Received: from mta.tpg-automotive.com ([127.0.0.1])
by localhost (mta.tpg-automotive.com [127.0.0.1]) (amavis, port 10032)
with ESMTP id ugyPbwCn3alR for <fquivera@tpg-automotive.com>;
Fri, 12 Apr 2024 01:03:23 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mta.tpg-automotive.com (Postfix) with ESMTP id 4DFA74C81E0
for <fquivera@tpg-automotive.com>; Fri, 12 Apr 2024 01:03:23 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mta.tpg-automotive.com 4DFA74C81E0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tpg-automotive.com;
s=0FE77D08-E620-11EE-AE9C-C72F24C394EA; t=1712876603;
bh=zEWiwbMgvTXz3eSBJc1Nt7ZQ4pBxMGTMoBZoh718N3s=;
h=Date:From:To:Message-ID:MIME-Version;
b=nII5QgGtLBDKd6veqDW9DQ/wRVi58VepuHbGpmX61zBeHBYrPl10PWHHOgQkKRE5K
44+RdpmIKtahutz1gf9XCQHku6oA2/CRii1MxXRI/9vWd0gBJZvrdRgmsHctPuBD+J
oRL+bPK+c3lkjy/ZB5qrG0RXIjSYrsz9XXXuTsz3R+/WF/OwmpQKngWoUo4wHmQbZv
bNTQTOJtFVYJibgFDW/SaEU4vpDfPwFW8cq4Dr39qyFmXVzfmc/K/4OPS2uIrrGOoj
icM+0fiVcBgIVau/9aPo09bTcrWhC7s1UlI32/T9Y5QeT+deAc0eSxMiVxpIXmJNUc
t7MGCVnxJ/Jmg==
X-Virus-Scanned: amavis at tpg-automotive.com
Received: from mta.tpg-automotive.com ([127.0.0.1])
by localhost (mta.tpg-automotive.com [127.0.0.1]) (amavis, port 10026)
with ESMTP id gCUaJcDNkOC4 for <fquivera@tpg-automotive.com>;
Fri, 12 Apr 2024 01:03:22 +0200 (CEST)
Received: from mta.tpg-automotive.com (localhost [127.0.0.1])
by mta.tpg-automotive.com (Postfix) with ESMTP id 915DE4C81DE
for <fquivera@tpg-automotive.com>; Fri, 12 Apr 2024 01:03:22 +0200 (CEST)
Date: Fri, 12 Apr 2024 01:03:22 +0200 (CEST)
From: Soporte Tecnologia <soporte@tpg-automotive.com>
To: Francisco Quivera <fquivera@tpg-automotive.com>
Message-ID: <1342676307.381.1712876602317.JavaMail.zextras@tpg-automotive.com>
Subject: test de correo
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_b244fcfe-bc10-4564-bfc6-c3ed9e162ebd"
X-Originating-IP: [181.208.25.231]
X-Mailer: Carbonio 24.1.0_ZEXTRAS_202401 (CarbonioWebClient - Brave 123.0.0.0 (Windows)/24.1.0_ZEXTRAS_202401 carbonio 20240104-1254 FOSS)
Thread-Index: HJw9qLVjeM8t6A+tSjQ2wJh/51hM3A==
Thread-Topic: test de correo
--=_b244fcfe-bc10-4564-bfc6-c3ed9e162ebd
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
test
--=_b244fcfe-bc10-4564-bfc6-c3ed9e162ebd
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><p>test</p></div></body></html>
--=_b244fcfe-bc10-4564-bfc6-c3ed9e162ebd--
Thank you in advance for your help
@fquivera
Hi,
Sorry to hear about your trouble.
And Thanks 🙏 for sharing the header to make the diagnosis easy.
I noticed that the required score to mark an email as SPAM is set to 3.2, and your received emails' score is 4.176
X-Spam-Status: Yes, score=4.176 required=3.2 tests=[ALL_TRUSTED=-1,
Also, the higher value among all is RCVD_IN_PBL=3.558,though your server IP is clean but your X-Originating-IP: [181.208.25.231] is listed in https://check.spamhaus.org/listed/?searchterm=181.208.25.231
For your better understanding, what is RCVD_IN_PBL?
RCVD_IN_PBL: This stands for "Received in Policy Block List." SpamAssassin uses various public DNS-based blocklists to assess whether incoming emails are likely to be spam. The Policy Block List (PBL) is one such list maintained by the Spamhaus Project. The PBL includes IP addresses that are not meant to send mail directly to mail servers but are typically assigned to end-user devices (e.g., residential broadband IP addresses).
SpamAssassin checks the IP address of the server or the originating IP from which the email was sent against various blocklists. If the IP address is found in the Spamhaus PBL, the RCVD_IN_PBL rule is triggered.
Fix this, and I hope things will get back to normal again 😊
I hope it helps.
Regards,
Sharif
Hi, Thank you very much for your quick help, I solved it using the following command:
# Prevent Carbonio from sending X-Originating-IP header
zmprov mcf zimbraSmtpSendAddOriginatingIP FALSE;
# Get current value:
zmprov gcf zimbraSmtpSendAddOriginatingIP;
Thanks
I ran the command suggested by @fquivera, however the emails are still marked as spam. Is there any other solution
# Prevent Carbonio from sending X-Originating-IP header
zmprov mcf zimbraSmtpSendAddOriginatingIP FALSE;
# Get current value:
zmprov gcf zimbraSmtpSendAddOriginatingIP;
We need to check the email header to find the cause only then we could decide how to fix it.
regards.
Hi @sharif
Return-Path: <user@mydomain.com>
Received: from mail.mydomain.com (LHLO
mail.mydomain.com) (...) by mail.mydomain.com
with LMTP; Mon, 17 Mar 2025 07:45:04 -0600 (GALT)
Received: from localhost (localhost [127.0.0.1])
by mail.mydomain.com (Postfix) with ESMTP id 1A2B64402D
for <user@mydomain.com>; Mon, 17 Mar 2025 07:45:04 -0600 (-06)
X-Spam-Flag: YES
X-Spam-Score: 5.202
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.202 required=3.2 tests=[ALL_TRUSTED=-1,
DKIM_INVALID=0.1, DKIM_SIGNED=0.1, DMARC_FAIL_QUAR=6, HTML_MESSAGE=0.001,
URIBL_DBL_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: mail.mydomain.com (amavis); dkim=neutral
reason="invalid (public key: not available)" header.d=mydomain.com
Received: from mail.mydomain.com ([127.0.0.1])
by localhost (mail.mydomain.com [127.0.0.1]) (amavis, port 10032)
with ESMTP id fuT9kKF9D1kf for <user@mydomain.com>;
Regards.
Hi,
Your email got flagged as spam mainly due to High Spam Score (5.202) – It went over the allowed limit (3.2), so it got marked as spam. To get pass the allowed score DMARC_FAIL_QUAR=6 contributed more than anything else. Fix the DNS records and emails should be delivered in the intended folder.
regards,
Hi @sharif
I have this problem when users try to log in - the location and the ip is the same
misc - Access from IP *.*.*.* suspended, for repeated failed login.
Hi
To avoid classifying emails from the internal network as spam, I used the command:
zmprov ms `zmhostname` zimbraAmavisOriginatingBypassSA TRUE