Issues with Spam filter

[avatar1024]

I know there have been some spam discussions going on lately and so sorry if this is a duplicate but I couldn't really find the same problem on the forum.

For the past couple of months, I suddenly started to have a lot of legit emails going into my spam folder (like from sender with who I had many communications before and even on thread that already had some back and forth). What is most annoying is that even when I unmark those email as spam, they are back in the inbox for a bit but keep landing back into the spam folder over and over again.

Anyone know how I can solve that?

Thank you!

[ccfu]

Have you checked the logs to see why this could be happening? Have you perhaps edited the SPAMASSASSIN settings recently and inadvertently added added a filter that matches the subject or sender? Does this only affect senders from a specific domain?

[avatar1024]

Thank you for the response. I haven't made any modifications to the SPAMASSASSIN settings. All senders detected as spam are using @gmail.com addresses but not all @gmail.com senders are detected as spams. I cannot anything related to moving emails to spam in the email logs on the cloudron platform.

The only change I ca think of is that I started to mark more emails as spams in my mobile email app (FairEmail on Android) when I do receive spam...so maybe something has gone wrong with the learning, but it's odd as hardly any emails marked as spam are @gmail.com domain.

[ccfu]

Could you maybe post the log entry from a mail that is wrongly detected as spam (but x-out the email addresses first for data protection)?
You could also look at the files in /home/yellowtent/boxdata/mail/spamd which contain the rules being applied on incoming mail.

[avatar1024]

Here is the log entry for an email receive:

{
  "ts": 1692612611166,
  "type": "queued",
  "direction": "inbound",
  "uuid": "0B7EEF12-370F-4FF4-B0D9-4FEDF28B8351.1",
  "messageId": "<CAO7YmYfYygRXzU-_k2qiu_EgMSQ7-sdrPR+7_FCne4D1F_ZfYA@mail.gmail.com>",
  "mailFrom": "<xxxxxx@gmail.com>",
  "spamStatus": "No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,  \tDKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT,  \tFREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,  \tSPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.4",
  "mailbox": null,
  "quotaPercent": null,
  "rcptTo": [
    "<xxxx@catalystcollective.org>"
  ],
  "remote": {
    "ip": "209.85.208.48",
    "port": 42063,
    "host": "mail-ed1-f48.google.com",
    "info": "mail-ed1-f48.google.com",
    "closed": false,
    "is_private": false,
    "is_local": false
  },
  "authUser": null,
  "message": "Message Queued (0B7EEF12-370F-4FF4-B0D9-4FEDF28B8351.1) (0B7EEF12-370F-4FF4-B0D9-4FEDF28B8351.1)"
}

I've also noticed something: In my email desktop client (Thunderbird) I moved (not forwarded just moved manually) an email from another inbox in the inbox that has this problem and this email also got moved to spam automatically.

[avatar1024]

Wait I've noticed something is up with FairEmail. If I put my phone in Airplane mode, then then emails stay in the Inbox and are not send to the spam folder over and over again. So might have nothing to do with Cloudron but with FairEmail handing spams weirdly...

[ccfu]

Yes, it appears to be your mail client and not Cloudron that is moving the messages to Spam. If you look at the log entry, the email had a score of -2.8 with a required 5.0 to be classified as spam. I don't know FairEmail but it does look like you will need to do some investigating there.

Maybe something to do with this?:
https://github.com/M66B/FairEmail/blob/master/docs/FAQ-en-rGB.md#user-content-faq163

[avatar1024]

Many thanks for this. The function is not actually activated but for some reasons the client seem to apply some kind of spam filter (even though when I open my spam folder it explicitly says that spam filtering is not done by the client but by the server). Anyway I definitely know where to look now so THANK YOU for your help and sorry for the tangent as this is not a Cloudron issue