Issue Description
I receiving lots of emails from spam domain yawausa .com.
I add this domain to “Blocked domain names” in admin panel.
I remove all emails in spam folder. This morning I see 33 emails in my SPAM folder:
=== TOP 50 SPAM SENDER DOMAINS ===
5 medicalsitesolutions .com
3 bigduit .com
2 yawausa .com
1 understandingminister .lat
1 phoeanix .com
1 abilitiesgrow .garden
1 streetavoid .bond
1 hosthangout .com
1 fiftyknee .living
1 fitsst .lol
1 muslimaspects .bond
1 flashhider .com
1 edelsteina .com
1 cloud19.whatsupnetworks .com
1 jensd-server1 .nl
1 apistube .com
1 bluepasturehq .bond
1 ligamorazan .com
1 purchasingreviews .com
1 anchorcircle.bond
1 apaniapk .com
1 gooddealm .com
1 kvitsmarkets .com
1 casinostarluck .net
1 honeycloudgj .bond
1 areastreet .com
1 elkemploy .com
1 mail.fast.net.id
=== TOP 30 SPAM SENDER ADDRESSES ===
2 james@medicalsitesolutions .com
2 kevin@medicalsitesolutions .com
1 [email protected]
1 earl@bigduit .com
1 membershipvip@phoeanix .com
1 [email protected]
1 [email protected]
1 mylowespoints@hosthangout .com
1 [email protected]
1 [email protected]
1 [email protected]
1 welcometomarriot@flashhider .com
1 cheri@bigduit .com
1 mahasteakselection@edelsteina .com
1 [email protected] .com
1 nick@bigduit .com
1 [email protected]
1 fedexparcel@apistube .com
1 [email protected]
1 walmartincorporated@ligamorazan .com
1 info@purchasingreviews .com
1 [email protected]
1 cvstransferupdate@apaniapk .com
1 acehardwarevip@gooddealm .com
1 vipacegroup@kvitsmarkets .com
1 cheesecakebakery@casinostarluck .net
1 [email protected]
1 skymiiesdeita@areastreet .com
1 jeffrey@medicalsitesolutions .com
1 fedexparcels@elkemploy .com
My Blocked domain names section:
shopmeusa .com
simpleacidrefluxfix .com
feelspanish.bond
okcflashpoint .com
*shopmeusa .com
scholarshipsi .com
costsoldier .com
*texasd7 .com
*whatsupnetworks .com
needylist .com
bigduit .com
yawausa .com
medicalsitesolutions .com
coolharborsh.blog
*.bigduit .com
lnfaucet .com
lifelovelupus .com
As you can see, yawausa .com and medicalsitesolutions .com are in blocked domain list, but I still receiving email from this domains
Expected Behavior
Do not allow emails from blocked domains
Actual Behavior
Emails still delivered
Relevant Log Output
root@mx:/opt/stalwart/logs# stalwart-cli --url http://127.0.0.1:8080 --api-key "$API_KEY" \
get memorylookupkey isflo12eadqa 2>&1
Lookup Key
Namespace: blocked-domains
Key: yawausa.com
Glob Pattern: No
root@mx:/opt/stalwart/logs# stalwart-cli --url http://127.0.0.1:8080 --api-key "$API_KEY" \
get memorylookupkey isflo12eadqa 2>&1
Lookup Key
Namespace: blocked-domains
Key: yawausa.com
Glob Pattern: No
root@mx:/opt/stalwart/logs# stalwart-cli --url http://127.0.0.1:8080 --api-key "$API_KEY" \
describe action 2>&1 | grep -iE "lookup|test|probe" | head -5
ReloadLookupStores: Reload: Lookup stores
PTR records returned by the reverse DNS lookup for the remote IP address
root@mx:/opt/stalwart/logs#
=== EMAIL HEADERS ===
Message-ID: [email protected]
From: Smelly Feet <[email protected]>
To: [email protected]
Reply-To: [email protected]
Subject: Odd Nail Rub Move Clears Up Nail 3X Faster.
Date: Sat, 23 May 2026 08:56:26 GMT
Received-At: Sat, 23 May 2026 10:06:52 GMT
--- Additional Headers ---
Delivered-To: [email protected]
X-Spam-Status: Yes
Received: from stack5.shopmeusa.com (stack5.shopmeusa.com [175.110.122.118] (AS49981 WorldStream B.V., NL))
(using TLSv1.3 with cipher TLS13_AES_256_GCM_SHA384)
by mx.myMXdomain.com (Stalwart SMTP) with ESMTPS id 4491AA29B251200;
Sat, 23 May 2026 10:06:52 +0000
Authentication-Results: mx.myMXdomain.com;
dkim=pass [email protected] header.s=cast header.b=vnq5nvfL;
spf=pass (mx.myMXdomain.com: domain of [email protected] designates 175.110.122.118 as permitted sender) smtp.helo=stack5.shopmeusa.com;
spf=pass (mx.myMXdomain.com: domain of [email protected] designates 175.110.122.118 as permitted sender) [email protected];
iprev=pass policy.iprev=175.110.122.118;
dmarc=pass header.from=yawausa.com policy.dmarc=none
Received-SPF: pass (mx.myMXdomain.com: domain of [email protected] designates 175.110.122.118 as permitted sender)
receiver=mx.myMXdomain.com; client-ip=175.110.122.118; envelope-from="[email protected]"; helo=stack5.shopmeusa.com;
X-Spam-Result: DMARC_POLICY_ALLOW (-0.50),
DKIM_ALLOW (-0.20),
SPF_ALLOW (-0.20),
HAS_LIST_UNSUB (-0.01),
ARC_NA (0.00),
DKIM_SIGNED (0.00),
DNSWL_BLOCKED (0.00),
FROM_HAS_DN (0.00),
FROM_NEQ_ENV_FROM (0.00),
HAS_EXTERNAL_IMG (0.00),
HAS_LINK_TO_LARGE_IMG (0.00),
HAS_REPLYTO (0.00),
HTML_SHORT_1 (0.00),
MID_RHS_MATCH_ENV_FROM (0.00),
RBL_SENDERSCORE_REPUT_BLOCKED (0.00),
RCPT_COUNT_ONE (0.00),
RCVD_TLS_LAST (0.00),
REPLYTO_DOM_EQ_FROM_DOM (0.00),
SOURCE_ASN_49981 (0.00),
TO_DN_NONE (0.00),
TO_MATCH_ENVRCPT_ALL (0.00),
URIBL_BLOCKED (0.00),
XM_UA_NO_VERSION (0.01),
RCVD_COUNT_ZERO (0.10),
FORGED_SENDER (0.30),
MID_RHS_MATCH_FROM (1.00),
FROM_EXCESS_QP (1.20),
SUBJ_EXCESS_QP (1.20),
DIRECT_TO_MX (2.00),
HTML_SHORT_LINK_IMG_1 (2.00),
PROB_SPAM_HIGH (8.00)
X-Spam-Score: spam, score=14.90, avg_confidence=0.97
Return-Path: <[email protected]>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=cast; d=yawausa.com;
h=Content-Type:MIME-Version:From:To:Subject:Date:Reply-To:Message-ID:
List-Unsubscribe:List-Unsubscribe-Post; [email protected];
bh=iUslT01HNTE8R1D3HJUdhOBOvqdtaoocE4//EkRiTCU=;
b=vnq5nvfLb2pj0SgaJX2DiZ37Ly0ag4H1TAr2m7RhDV/9CjKmtewOj+J6Lxwzv5tpcs/5s3nRYEgr
704XOguURHcuvIcro0niBcRUp/h2rj/tG+/jOSP9KTG/Vo/iaB5UZHMvfT9DhyvWOEC69lzULfxm
FeVcsy0tkHs5fFYXTT4=
Content-Type: multipart/alternative; boundary="LpebV30Qo1uJbvkw=_?:"
MIME-Version: 1.0
From: =?utf-8?q?Smelly_Feet?= <[email protected]>
To: [email protected]
Subject: =?utf-8?q?Odd_Nail_Rub_Move_Clears_Up_Nail_3X_Faster=2E?=
Date: Sat, 23 May 2026 08:56:26 -0000
X-Company-Header: yawausa
X-Campaign-ID: yawausa_1779530810
X-SFMC-Stack: 1
X-Mailer: PY AI ML
X-Feedback-ID: T350HxQDna1X:yawausa
Reply-To: [email protected]
Message-ID: <[email protected]>
List-Unsubscribe: <https://nail.desiredcraft.net/uzudmxylzoursqnbjvrxcbvbcsfvqjguzzswksfvmlzhnekcyl?token=T350HxQDna1X>, <mailto:[email protected]>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
--- Authentication Results ---
SPF: pass (stack5.shopmeusa.com)
DKIM: pass
DMARC: pass policy=none
=== EMAIL METADATA ===
Email ID: t0iaaae3k
Thread ID: e3k
Size: 7.87 KB
Has Attachment: No
Keywords: $junk, $seen
=== EMAIL BODY ===
--- Plain Text Version ---
supranail
If you’ve been battling nail fungus for more than 6 months…
But your nails are still yellow, brown, crumbly and smelly, try this:
After you get out of the shower, wipe your feet with a clean towel…
Then DO THIS SIMPLE “NAIL RUB” move.
With this one simple trick, you’ll be able to quickly
see the exact type of nail fungus you battle with….
And what you need to do immediately to clear your nails TWICE
AS FAST and finally end your embarrassing fungus FOR GOOD.
It sounds weird, but thousands of men and women with fungus problems say "IT WORKS WONDERS!"
74,783 people who have used it have seen their toenails start to clear up almost instantly…
They’re no longer insecure about taking their shoes off and worried that they would infect their families.
Like Mary O. from Texas, who now says…
“I’ve been fighting toenail fungus for over 7 years…
But not anymore! I have shiny nails and silky feet!”
Get all the details here:
>>>Odd “Nail Rub” Move Clears Up Nail 3X Faster
If you do not want to receive email, unsubscribe hereUnited Nations street, no 3-5, building B2, 5th floor, apartment 28, Bucharest
--- HTML Version ---
<!DOCTYPE html>
<html>
<head>
<title>supranail</title>
</head><body>
<p>If you’ve been battling nail fungus for more than 6 months…</p>
<p>But your nails are still yellow, brown, crumbly and smelly, try this: </p>
<p>After you get out of the shower, wipe your feet with a clean towel…</p>
<p>Then DO THIS SIMPLE “NAIL RUB” move.</p>
<p>With this one simple trick, you’ll be able to quickly</p>
<p><a href="https://nail.desiredcraft.net/dyjstbondushishxxclhhukuoavitajfoyyronknwohpqflbwxllelxtncioegsqeflsbyvhbbxhrlpt?token=T350HxQDna1X">see the exact type of nail fungus you battle with….</a></p>
<p>And what you need to do immediately to clear your nails TWICE</p>
<p>AS FAST and finally end your embarrassing fungus FOR GOOD. </p>
<p>It sounds weird, but thousands of men and women with fungus problems say "IT WORKS WONDERS!"</p>
<p>74,783 people who have used it have seen their toenails start to clear up almost instantly… </p>
<p>They’re no longer insecure about taking their shoes off and worried that they would infect their families. </p>
<p>Like Mary O. from Texas, who now says… </p>
<p>“I’ve been fighting toenail fungus for over 7 years…</p>
<p>But not anymore! I have shiny nails and silky feet!” </p>
<p>Get all the details here: </p>
<p>>>><a href="https://nail.desiredcraft.net/dyjstbondushishxxclhhukuoavitajfoyyronknwohpqflbwxllelxtncioegsqeflsbyvhbbxhrlpt?token=T350HxQDna1X">Odd “Nail Rub” Move Clears Up Nail 3X Faster</a></p>
<p><a href="https://nail.desiredcraft.net/dyjstbondushishxxclhhukuoavitajfoyyronknwohpqflbwxllelxtncioegsqeflsbyvhbbxhrlpt?token=T350HxQDna1X"><img class="lazyloaded" data-src="download/emails-img/sup3.gif" src="https://trysupranail.com/affiliates/download/emails-img/sup3.gif"/></a></p>
<p></p>
<p></p>
<p></p>
<p><sub>If you do not want to receive email, <a href="https://nail.desiredcraft.net/uzudmxylzoursqnbjvrxcbvbcsfvqjguzzswksfvmlzhnekcyl?token=T350HxQDna1X">unsubscribe here</a></sub><br/><sub>United Nations street, no 3-5, building B2, 5th floor, apartment 28, Bucharest</sub></p>
<img alt="" height="1" src="http://track.sdkpanel.com/track/track_open.php?t=T350HxQDna1X&o=U3VwcmFuYWls" style="display:none;" width="1"/></body>
</html>
Stalwart Version
v0.16.x
Installation Method
Binary (Linux)
Database Backend
RocksDB
Blob Storage
RocksDB
Search Engine
PostgreSQL
Directory Backend
Internal
I have reviewed the documentation and FAQ and confirm that my issue is NOT addressed there.
on
I have searched this support forum (open and closed topics) and confirm this is not a duplicate.
on
I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.
on