[Rspamd] Improve spoofing detection

master
andryyy 2019-04-14 20:37:38 +02:00
parent cd88165282
commit 9f00d956f1
2 changed files with 12 additions and 0 deletions

View File

@ -16,3 +16,7 @@ SOGO_CONTACT_EXCLUDE_FWD_HOST {
SOGO_CONTACT_SPOOFED {
expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
}
SPOOFED_UNAUTH {
expression = "UNAUTH_MAILCOW_DOMAIN & !MAILCOW_WHITE & !R_SPF_ALLOW";
score = 5.0;
}

View File

@ -83,3 +83,11 @@ GLOBAL_RCPT_BL {
prefilter = true;
action = "reject";
}
UNAUTH_MAILCOW_DOMAIN {
type = "header";
header = "from";
filter = "email:domain";
nflags = ["authenticated"];
map = "redis://DOMAIN_MAP";
}