From 0019502069edce8457fbd7e9ad06ab5c7c513b72 Mon Sep 17 00:00:00 2001
From: "andre.peters" <andre.peters@servercow.de>
Date: Tue, 16 Jan 2018 21:02:45 +0100
Subject: [PATCH] [Rspamd] Increase spam scores for SPF failures

---
 data/conf/rspamd/local.d/composites.conf | 4 ++++
 data/conf/rspamd/local.d/metrics.conf    | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/data/conf/rspamd/local.d/composites.conf b/data/conf/rspamd/local.d/composites.conf
index ea35dc92..dd47be35 100644
--- a/data/conf/rspamd/local.d/composites.conf
+++ b/data/conf/rspamd/local.d/composites.conf
@@ -6,3 +6,7 @@ VIRUS_FOUND {
   expression = "CLAM_VIRUS & !MAILCOW_WHITE";
   score = 2000;
 }
+SPF_FAIL_NO_DKIM {
+  expression = "R_SPF_FAIL & R_DKIM_NA & !MAILCOW_WHITE";
+  score = 10;
+}
diff --git a/data/conf/rspamd/local.d/metrics.conf b/data/conf/rspamd/local.d/metrics.conf
index d3eb2657..66004141 100644
--- a/data/conf/rspamd/local.d/metrics.conf
+++ b/data/conf/rspamd/local.d/metrics.conf
@@ -38,3 +38,6 @@ symbol "SPOOFED_SENDER" {
 	description = "Sender is not authenticated but part of mailcow managed domains";
 	score = 1.0;
 }
+symbol "R_SPF_FAIL" {
+  score = 4.0;
+}