public nobgit read

NobMail

Based on mailcow: dockerized

Languages

Repository composition by tracked source files.

PHP

PHP 49% JavaScript 35% HTML 9% CSS 4% Shell 2% Python 1% Lua 0% Perl 0% Ruby 0% SCSS 0%

Create file Wiki Documentation

Clone

https://nobgit.com/orgs/nobgit/nobmail.git

ssh://[email protected]:2222/orgs/nobgit/nobmail.git

Commit

[Rspamd] Improve spoofing detection

9f00d956

andryyy <[email protected]> 7 years ago

data/conf/rspamd/local.d/composites.conf | 4 ++++
 data/conf/rspamd/local.d/multimap.conf   | 8 ++++++++
 2 files changed, 12 insertions(+)

Diff

diff --git a/data/conf/rspamd/local.d/composites.conf b/data/conf/rspamd/local.d/composites.conf
index d775c4f6..46f06743 100644
--- a/data/conf/rspamd/local.d/composites.conf
+++ b/data/conf/rspamd/local.d/composites.conf
@@ -16,3 +16,7 @@ SOGO_CONTACT_EXCLUDE_FWD_HOST {
 SOGO_CONTACT_SPOOFED {
   expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
 }
+SPOOFED_UNAUTH {
+  expression = "UNAUTH_MAILCOW_DOMAIN & !MAILCOW_WHITE & !R_SPF_ALLOW";
+  score = 5.0;
+}
diff --git a/data/conf/rspamd/local.d/multimap.conf b/data/conf/rspamd/local.d/multimap.conf
index 7752b813..6ce56f7a 100644
--- a/data/conf/rspamd/local.d/multimap.conf
+++ b/data/conf/rspamd/local.d/multimap.conf
@@ -83,3 +83,11 @@ GLOBAL_RCPT_BL {
   prefilter = true;
   action = "reject";
 }
+
+UNAUTH_MAILCOW_DOMAIN {
+  type = "header";
+  header = "from";
+  filter = "email:domain";
+  nflags = ["authenticated"];
+  map = "redis://DOMAIN_MAP";
+}