mailcow-dockerized/data/conf/rspamd/dynmaps/settings.php

<?php
/*
The match section performs AND operation on different matches: for example, if you have from and rcpt in the same rule,
then the rule matches only when from AND rcpt match. For similar matches, the OR rule applies: if you have multiple rcpt matches,
then any of these will trigger the rule. If a rule is triggered then no more rules are matched.
*/
function parse_email($email) {
  if(!filter_var($email, FILTER_VALIDATE_EMAIL)) return false;
  $a = strrpos($email, '@');
  return array('local' => substr($email, 0, $a), 'domain' => substr($email, $a));
}
header('Content-Type: text/plain');
require_once "vars.inc.php";

ini_set('error_reporting', 0);

$dsn = $database_type . ':host=' . $database_host . ';dbname=' . $database_name;
$opt = [
    PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
    PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
    PDO::ATTR_EMULATE_PREPARES   => false,
];
try {
  $pdo = new PDO($dsn, $database_user, $database_pass, $opt);
  $stmt = $pdo->query("SELECT * FROM `filterconf`");
}
catch (PDOException $e) {
  echo 'settings { }';
  exit;
}

?>
settings {
<?php

/*
// Start whitelist for forwarding hosts
*/

try {
	$stmt = $pdo->query("SELECT `host` FROM `forwarding_hosts`");
	$rows = $stmt->fetchAll(PDO::FETCH_COLUMN);
}
catch (PDOException $e) {
	$rows = array();
}
if (!empty($rows)) {
?>
	whitelist_forwarding_hosts {
		priority = high;
<?php
foreach ($rows as $host):
?>
		ip = "<?=$host;?>";
<?php
endforeach;
?>
		want_spam = yes;
	}
<?php
}

/*
// Start custom scores for users
*/

$stmt = $pdo->query("SELECT DISTINCT `object` FROM `filterconf` WHERE `option` = 'highspamlevel' OR `option` = 'lowspamlevel'");
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);

while ($row = array_shift($rows)) {
	$username_sane = preg_replace("/[^a-zA-Z0-9]+/", "", $row['object']);
?>
	score_<?=$username_sane;?> {
		priority = low;
<?php
	$stmt = $pdo->prepare("SELECT `option`, `value` FROM `filterconf` 
		WHERE (`option` = 'highspamlevel' OR `option` = 'lowspamlevel')
			AND `object`= :object");
	$stmt->execute(array(':object' => $row['object']));
	$spamscore = $stmt->fetchAll(PDO::FETCH_COLUMN|PDO::FETCH_GROUP);

	$stmt = $pdo->prepare("SELECT GROUP_CONCAT(REPLACE(`value`, '*', '.*') SEPARATOR '|') AS `value` FROM `filterconf`
		WHERE (`object`= :object OR `object`= :object_domain)
			AND (`option` = 'blacklist_from' OR `option` = 'whitelist_from')");
	$stmt->execute(array(':object' => $row['object'], ':object_domain' => substr(strrchr($row['object'], "@"), 1)));
	$grouped_lists = $stmt->fetchAll(PDO::FETCH_ASSOC);
	array_filter($grouped_lists);
    while ($grouped_list = array_shift($grouped_lists)) {
        $value_sane = preg_replace("/\.\./", ".", (preg_replace("/\*/", ".*", $grouped_list['value'])));
        if (!empty($value_sane)) {
?>
		from = "/^((?!<?=$value_sane;?>).)*$/";
<?php
        }
    }
    $local = parse_email($row['object'])['local'];
    $domain = parse_email($row['object'])['domain'];
    if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
    }
?>
		rcpt = "<?=$row['object'];?>";
<?php
	$stmt = $pdo->prepare("SELECT `address` FROM `alias` WHERE `goto` LIKE :object_goto AND `address` NOT LIKE '@%' AND `address` != :object_address");
	$stmt->execute(array(':object_goto' => '%' . $row['object'] . '%', ':object_address' => $row['object']));
	$rows_aliases_1 = $stmt->fetchAll(PDO::FETCH_ASSOC);
	while ($row_aliases_1 = array_shift($rows_aliases_1)) {
    $local = parse_email($row_aliases_1['address'])['local'];
    $domain = parse_email($row_aliases_1['address'])['domain'];
    if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
    }
?>
		rcpt = "<?=$row_aliases_1['address'];?>";
<?php
	}
	$stmt = $pdo->prepare("SELECT CONCAT(`local_part`, '@', `alias_domain`.`alias_domain`) AS `aliases` FROM `mailbox` 
		LEFT OUTER JOIN `alias_domain` on `mailbox`.`domain` = `alias_domain`.`target_domain`
		WHERE `mailbox`.`username` = :object");
	$stmt->execute(array(':object' => $row['object']));
	$rows_aliases_2 = $stmt->fetchAll(PDO::FETCH_ASSOC);
	array_filter($rows_aliases_2);
	while ($row_aliases_2 = array_shift($rows_aliases_2)) {
    if (!empty($row_aliases_2['aliases'])) {
      $local = parse_email($row_aliases_2['aliases'])['local'];
      $domain = parse_email($row_aliases_2['aliases'])['domain'];
      if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
      }
?>
		rcpt = "<?=$row_aliases_2['aliases'];?>";
<?php
    }
	}
?>
		apply "default" {
			actions {
				reject = <?=$spamscore['highspamlevel'][0];?>;
				greylist = <?=$spamscore['lowspamlevel'][0] - 1;?>;
				"add header" = <?=$spamscore['lowspamlevel'][0];?>;
			}
		}
	}
<?php
}

/*
// Start whitelist
*/

$stmt = $pdo->query("SELECT DISTINCT `object` FROM `filterconf` WHERE `option` = 'whitelist_from'");
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
while ($row = array_shift($rows)) {
	$username_sane = preg_replace("/[^a-zA-Z0-9]+/", "", $row['object']);
?>
	whitelist_<?=$username_sane;?> {
<?php
	$stmt = $pdo->prepare("SELECT GROUP_CONCAT(REPLACE(`value`, '*', '.*') SEPARATOR '|') AS `value` FROM `filterconf`
		WHERE `object`= :object
			AND `option` = 'whitelist_from'");
	$stmt->execute(array(':object' => $row['object']));
	$grouped_lists = $stmt->fetchAll(PDO::FETCH_COLUMN);
	$value_sane = preg_replace("/\.\./", ".", (preg_replace("/\*/", ".*", $grouped_lists[0])));
?>
		from = "/(<?=$value_sane;?>)/";
<?php
	if (!filter_var(trim($row['object']), FILTER_VALIDATE_EMAIL)) {
?>
		priority = medium;
		rcpt = "/.*@<?=$row['object'];?>/";
<?php
		$stmt = $pdo->prepare("SELECT `alias_domain` FROM `alias_domain`
			WHERE `target_domain` = :object");
		$stmt->execute(array(':object' => $row['object']));
		$rows_domain_aliases = $stmt->fetchAll(PDO::FETCH_ASSOC);
		array_filter($rows_domain_aliases);
		while ($row_domain_aliases = array_shift($rows_domain_aliases)) {
?>
		rcpt = "/.*@<?=$row_domain_aliases['alias_domain'];?>/";
<?php
		}
	}
	else {
?>
		priority = high;
<?php
    $local = parse_email($row['object'])['local'];
    $domain = parse_email($row['object'])['domain'];
    if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
    }
?>
		rcpt = "<?=$row['object'];?>";
<?php
	}
	$stmt = $pdo->prepare("SELECT `address` FROM `alias` WHERE `goto` LIKE :object_goto AND `address` NOT LIKE '@%' AND `address` != :object_address");
	$stmt->execute(array(':object_goto' => '%' . $row['object'] . '%', ':object_address' => $row['object']));
	$rows_aliases_wl_1 = $stmt->fetchAll(PDO::FETCH_ASSOC);
	array_filter($rows_aliases_wl_1);
	while ($row_aliases_wl_1 = array_shift($rows_aliases_wl_1)) {
      $local = parse_email($row_aliases_wl_1['address'])['local'];
      $domain = parse_email($row_aliases_wl_1['address'])['domain'];
      if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
      }
?>
		rcpt = "<?=$row_aliases_wl_1['address'];?>";
<?php
	}
	$stmt = $pdo->prepare("SELECT CONCAT(`local_part`, '@', `alias_domain`.`alias_domain`) AS `aliases` FROM `mailbox` 
		LEFT OUTER JOIN `alias_domain` on `mailbox`.`domain` = `alias_domain`.`target_domain`
		WHERE `mailbox`.`username` = :object");
	$stmt->execute(array(':object' => $row['object']));
	$rows_aliases_wl_2 = $stmt->fetchAll(PDO::FETCH_ASSOC);
	array_filter($rows_aliases_wl_2);
	while ($row_aliases_wl_2 = array_shift($rows_aliases_wl_2)) {
    if (!empty($row_aliases_wl_2['aliases'])) {
      $local = parse_email($row_aliases_wl_2['aliases'])['local'];
      $domain = parse_email($row_aliases_wl_2['aliases'])['domain'];
      if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
      }
?>
		rcpt = "<?=$row_aliases_wl_2['aliases'];?>";
<?php
    }
	}
?>
		apply "default" {
			MAILCOW_WHITE = -999.0;
		}
		symbols [
			"MAILCOW_WHITE"
		]
	}
<?php
}

/*
// Start blacklist
*/

$stmt = $pdo->query("SELECT DISTINCT `object` FROM `filterconf` WHERE `option` = 'blacklist_from'");
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
while ($row = array_shift($rows)) {
	$username_sane = preg_replace("/[^a-zA-Z0-9]+/", "", $row['object']);
?>
	blacklist_<?=$username_sane;?> {
<?php
	$stmt = $pdo->prepare("SELECT GROUP_CONCAT(REPLACE(`value`, '*', '.*') SEPARATOR '|') AS `value` FROM `filterconf`
		WHERE `object`= :object
			AND `option` = 'blacklist_from'");
	$stmt->execute(array(':object' => $row['object']));
	$grouped_lists = $stmt->fetchAll(PDO::FETCH_COLUMN);
	$value_sane = preg_replace("/\.\./", ".", (preg_replace("/\*/", ".*", $grouped_lists[0])));
?>
		from = "/(<?=$value_sane;?>)/";
<?php
	if (!filter_var(trim($row['object']), FILTER_VALIDATE_EMAIL)) {
?>
		priority = medium;
		rcpt = "/.*@<?=$row['object'];?>/";
<?php
		$stmt = $pdo->prepare("SELECT `alias_domain` FROM `alias_domain`
			WHERE `target_domain` = :object");
		$stmt->execute(array(':object' => $row['object']));
		$rows_domain_aliases = $stmt->fetchAll(PDO::FETCH_ASSOC);
		array_filter($rows_domain_aliases);
		while ($row_domain_aliases = array_shift($rows_domain_aliases)) {
?>
		rcpt = "/.*@<?=$row_domain_aliases['alias_domain'];?>/";
<?php
		}
	}
	else {
?>
		priority = high;
<?php
    $local = parse_email($row['object'])['local'];
    $domain = parse_email($row['object'])['domain'];
    if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
    }
?>
		rcpt = "<?=$row['object'];?>";
<?php
	}
	$stmt = $pdo->prepare("SELECT `address` FROM `alias` WHERE `goto` LIKE :object_goto AND `address` NOT LIKE '@%' AND `address` != :object_address");
	$stmt->execute(array(':object_goto' => '%' . $row['object'] . '%', ':object_address' => $row['object']));
	$rows_aliases_bl_1 = $stmt->fetchAll(PDO::FETCH_ASSOC);
	array_filter($rows_aliases_bl_1);
	while ($row_aliases_bl_1 = array_shift($rows_aliases_bl_1)) {
      $local = parse_email($row_aliases_bl_1['address'])['local'];
      $domain = parse_email($row_aliases_bl_1['address'])['domain'];
      if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
      }
?>
		rcpt = "<?=$row_aliases_bl_1['address'];?>";
<?php
	}
	$stmt = $pdo->prepare("SELECT CONCAT(`local_part`, '@', `alias_domain`.`alias_domain`) AS `aliases` FROM `mailbox` 
		LEFT OUTER JOIN `alias_domain` on `mailbox`.`domain` = `alias_domain`.`target_domain`
		WHERE `mailbox`.`username` = :object");
	$stmt->execute(array(':object' => $row['object']));
	$rows_aliases_bl_2 = $stmt->fetchAll(PDO::FETCH_ASSOC);
	array_filter($rows_aliases_bl_2);
	while ($row_aliases_bl_2 = array_shift($rows_aliases_bl_2)) {
    if (!empty($row_aliases_bl_2['aliases'])) {
      $local = parse_email($row_aliases_bl_2['aliases'])['local'];
      $domain = parse_email($row_aliases_bl_2['aliases'])['domain'];
      if (!empty($local) && !empty($local)) {
?>
		rcpt = "/<?=$local;?>\+.*<?=$domain;?>/";
<?php
      }
?>
		rcpt = "<?=$row_aliases_bl_2['aliases'];?>";
<?php
    }
	}
?>
		apply "default" {
			MAILCOW_BLACK = 999.0;
		}
		symbols [
			"MAILCOW_BLACK"
		]
	}
<?php
}
?>
}