[Rspamd] Use reputation plugin instead of ip_ and url_reputation

data/conf/rspamd/custom/dovecot_trusted.map

@@ -0,0 +1,2 @@
+172.22.1.250/32
+fd4d:6169:6c63:6f77::d/128

data/conf/rspamd/custom/mailcow_networks.map

@@ -0,0 +1,2 @@
+172.22.1.0/24
+fd4d:6169:6c63:6f77::/64

data/conf/rspamd/custom/rspamd_trusted.map

@@ -0,0 +1,2 @@
+172.22.1.12/32
+fd4d:6169:6c63:6f77::10/128

data/conf/rspamd/custom/signed_networks.map

@@ -0,0 +1,2 @@
+172.22.1.0/24
+fd4d:6169:6c63:6f77::/64

data/conf/rspamd/local.d/groups.conf

@@ -31,3 +31,20 @@ group "MX" {
     one_shot = true;
   }
 }
+
+group "reputation" {
+  symbols = {
+    "IP_REPUTATION_HAM" {
+      weight = 1.0;
+    }
+    "IP_REPUTATION_SPAM" {
+      weight = 4.0;
+    }
+    "SENDER_REP_HAM" {
+      weight = 1.0;
+    }
+    "SENDER_REP_SPAM" {
+      weight = 2.0;
+    }
+  }
+}

data/conf/rspamd/local.d/ip_score.conf

@@ -1,24 +0,0 @@
-# how each action is treated in scoring
-actions {
-  reject = 1.0;
-  "add header" = 0.25;
-  "rewrite subject" = 0.25;
-  "no action" = 1.0;
-}
-# how each component is evaluated
-scores {
-  asn = 0.5;
-  country = 0.1;
-  ipnet = 0.8;
-  ip = 1.0;
-}
-asn_prefix = "a:";
-country_prefix = "c:";
-hash = "ip_score";
-ipnet_prefix = "n:";
-lower_bound = 10;
-metric = "default";
-max_score = 10;
-min_score = -5;
-score_divisor = 10;
-symbol = "IP_SCORE";

data/conf/rspamd/local.d/reputation.conf

@@ -0,0 +1,10 @@
+rules {
+  ip_reputation = {
+    selector "ip" {
+    }
+    backend "redis" {
+      servers = "redis";
+    }
+    symbol = "IP_REPUTATION";
+  }
+}

data/conf/rspamd/local.d/url_reputation.conf

@@ -1,26 +0,0 @@
-# Key prefix for redis - default "Ur."
-key_prefix = "Ur.";
-# Symbols to insert - defaults as shown
-symbols {
-  white = "URL_REPUTATION_WHITE";
-  black = "URL_REPUTATION_BLACK";
-  grey = "URL_REPUTATION_GREY";
-  neutral = "URL_REPUTATION_NEUTRAL";
-}
-# DKIM/DMARC/SPF allow symbols - defaults as shown
-foreign_symbols {
-  dmarc = "DMARC_POLICY_ALLOW";
-  dkim = "R_DKIM_ALLOW";
-  spf = "R_SPF_ALLOW";
-}
-# SURBL metatags to ignore - default as shown
-ignore_surbl = ["URIBL_BLOCKED", "DBL_PROHIBIT", "SURBL_BLOCKED"];
-# Amount of samples required for scoring - default 5
-threshold = 5;
-# Maximum number of TLDs to update reputation on (default 1)
-update_limit = 1;
-# Maximum number of TLDs to query reputation on (default 100)
-query_limit = 100;
-# If true, try to find most 'relevant' URL (default true)
-relevance = true;
-enabled = true;

data/conf/rspamd/override.d/worker-controller-password.inc

@@ -0,0 +1 @@
+enable_password = "$2$sbs867o6ipcmx68qw5kishm39m9xqi5r$6t61dfmameywabgyjdtekhj85gdqgw7res5ygdwphozdcirfcr3y";