Bad SPAM reputation with WebApp/DeskApp

robgnu

Hello,
some of our users asks our support for a while, why their e-mail sent to other people/companys are sorted as spam or get greylisted.

In the last days I took some time to investigate into this issue. First of all, I checked SFP, DKIM and DMARC and so on. Everything is fine so far.

I checked outgoing and incoming mails with RSPAMD, a great daemon for spam filtering beside a Postfix installation. Here is a really simple Testmail, created with WebApp (I x-ed some sensitive information):

Subject: Test
From: =?us-ascii?Q?Technik=2Eeu_Support?= <support@XXX.eu>
To: =?us-ascii?Q?robert=40xxxx=2Ede?= <robert@XXX.de>
Date: Thu, 10 Sep 2020 07:15:05 +0000
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3 (Normal)
Thread-Index: AYCiUhtCyLFTBSo0Qcu8lvij4cIXWw==
Message-Id: <kcEE.M2XOQ0MfSf6q6nS4OXFHVQ.EJIFHEKH1gE@kopano.XXX.eu>

Test 0915

This mail got a bad score, not because of the simple content, but because of the From: and To: in the header. Here is the log message from RSPAMD:

To that contains encoded characters while quoted-printable is not needed as all symbols are 7bit.
From that contains encoded characters while quoted-printable is not needed as all symbols are 7bit.

When I create a mail with Outlook (ActiveSync) or Thunderbird (IMAP), the mail is created correctly.

I tried this with the current supported version of Core and Webapp as well as with the current development builds from the community site. Everything on Debian 10.

So my question is: Is this a wanted behaviour or just a bug inside WebApp? It would be great so solve this issue - maybe with a simple check before mail encoding?

Bye
Rob.

fbartels

@robgnu can you include versions in your report? I do remember some work in the past around false detection in rspamd.

robgnu

@fbartels today I checked with these Versions:

WebApp: 4.3.2900+1749.1
Core: 10.0.6.406.69083f1d7-0+217.1

robgnu

@fbartels Today I checked again with a test-account of my clients, who has a subscription. The results are exact the same as described. These are the versions on Debian 10:

WebApp: 4.2.2878+128.1
Kopano Core: 8.7.16

So should my client contact your support for this case?

bye
Robert

fbartels

@robgnu said in Bad SPAM reputation with WebApp/DeskApp:

So should my client contact your support for this case?

Yes, please. I would anyways always recommend this if you have a subscription.