IPS Bypass IP rspamd_proxy

,

Does it occur regularly?

Are you sure it’s related to IPS?

You may check IPS logs with Evebox.

Found another thread about that: