浏览代码

[Rspamd] Set rspamd as trusted host, rspamd is not spoofing

andryyy 5 年之前
父节点
当前提交
5f73629493
共有 2 个文件被更改,包括 7 次插入1 次删除
  1. 1 1
      data/conf/rspamd/local.d/composites.conf
  2. 6 0
      data/conf/rspamd/local.d/multimap.conf

+ 1 - 1
data/conf/rspamd/local.d/composites.conf

@@ -17,7 +17,7 @@ SOGO_CONTACT_SPOOFED {
   expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
   expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
 }
 }
 SPOOFED_UNAUTH {
 SPOOFED_UNAUTH {
-  expression = "!MAILCOW_AUTH & !MAILCOW_WHITE & !R_SPF_ALLOW & !DMARC_POLICY_ALLOW & !ARC_ALLOW & !SIEVE_HOST & MAILCOW_DOMAIN_HEADER_FROM";
+  expression = "!MAILCOW_AUTH & !MAILCOW_WHITE & !R_SPF_ALLOW & !DMARC_POLICY_ALLOW & !ARC_ALLOW & !RSPAMD_HOST & !SIEVE_HOST & MAILCOW_DOMAIN_HEADER_FROM";
   score = 5.0;
   score = 5.0;
 }
 }
 # Only apply to inbound unauthed and not whitelisted
 # Only apply to inbound unauthed and not whitelisted

+ 6 - 0
data/conf/rspamd/local.d/multimap.conf

@@ -90,6 +90,12 @@ SIEVE_HOST {
   symbols_set = ["SIEVE_HOST"];
   symbols_set = ["SIEVE_HOST"];
 }
 }
 
 
+RSPAMD_HOST {
+  type = "ip";
+  map = "$LOCAL_CONFDIR/custom/rspamd_trusted.map";
+  symbols_set = ["RSPAMD_HOST"];
+}
+
 MAILCOW_DOMAIN_HEADER_FROM { 
 MAILCOW_DOMAIN_HEADER_FROM { 
   type = "header";  
   type = "header";  
   header = "from";  
   header = "from";